CVE-2002-1482 SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote attackers to gain administrative privileges via SQL code in the password entry.
HighCVSS 10.0
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote attackers to gain administrative privileges via SQL code in the password entry.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpgb | = 1.10 | No fix listed |
| phpgb | = 1.20 | No fix listed |
| phpgb | = 1.30 | No fix listed |
References
- 20020909 phpGB: DoS and executing_arbitrary_commands exploit mailing-list patch vendor-advisory
- phpgb-login-sql-injection(10068) patch vdb-entry vendor-advisory
- 5673 exploit patch vdb-entry vendor-advisory