SQL injection vulnerability in accesscontrol.php in PhpPass 2 allows remote attackers to execute arbitrary SQL commands via the (1) uid and (2) pwd parameters.
References
Configurations
History
20 Nov 2024, 23:47
Type | Values Removed | Values Added |
---|---|---|
References | () http://securityreason.com/securityalert/3349 - Exploit | |
References | () http://www.securityfocus.com/archive/1/307224/30/26300/threaded - | |
References | () http://www.securityfocus.com/bid/6594 - Exploit | |
References | () http://www.securitytracker.com/id?1005948 - Exploit |
Information
Published : 2003-12-31 05:00
Updated : 2024-11-20 23:47
NVD link : CVE-2003-1533
Mitre link : CVE-2003-1533
CVE.ORG link : CVE-2003-1533
JSON object : View
Products Affected
phppass
- phppass
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')