CVE-2003-1533

SQL injection vulnerability in accesscontrol.php in PhpPass 2 allows remote attackers to execute arbitrary SQL commands via the (1) uid and (2) pwd parameters.
Configurations

Configuration 1 (hide)

cpe:2.3:a:phppass:phppass:2:*:*:*:*:*:*:*

History

20 Nov 2024, 23:47

Type Values Removed Values Added
References () http://securityreason.com/securityalert/3349 - Exploit () http://securityreason.com/securityalert/3349 - Exploit
References () http://www.securityfocus.com/archive/1/307224/30/26300/threaded - () http://www.securityfocus.com/archive/1/307224/30/26300/threaded -
References () http://www.securityfocus.com/bid/6594 - Exploit () http://www.securityfocus.com/bid/6594 - Exploit
References () http://www.securitytracker.com/id?1005948 - Exploit () http://www.securitytracker.com/id?1005948 - Exploit

Information

Published : 2003-12-31 05:00

Updated : 2024-11-20 23:47


NVD link : CVE-2003-1533

Mitre link : CVE-2003-1533

CVE.ORG link : CVE-2003-1533


JSON object : View

Products Affected

phppass

  • phppass
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')