CVE-2002-2175 phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effectively delete other usernames via a short...
MediumCVSS 4.0
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effectively delete other usernames via a short username that matches the end of the targeted username.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpsquidpass | All versions | No fix listed |
References
- 20020623 phpsquidpass: unauthorized user deleting mailing-list
- sourceforge.net patch vendor-advisory
- phpsquidpass-user-deletion(9417) patch vdb-entry vendor-advisory
- 5090 patch vdb-entry vendor-advisory