CVE-2001-1053

Опубликовано: 13 июл. 2001

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2001-07/0249.html
Exploit
Patch
Vendor Advisory
http://www.adcycle.com/cgi-bin/download.cgi?type=UNIX&version=1.17
http://www.securityfocus.com/bid/3032
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6837
http://archives.neohapsis.com/archives/bugtraq/2001-07/0249.html
Exploit
Patch
Vendor Advisory
http://www.adcycle.com/cgi-bin/download.cgi?type=UNIX&version=1.17
http://www.securityfocus.com/bid/3032
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6837

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:adcycle:adcycle:0.77:*:*:*:*:*:*:*

cpe:2.3:a:adcycle:adcycle:0.77b:*:*:*:*:*:*:*

cpe:2.3:a:adcycle:adcycle:0.78b:*:*:*:*:*:*:*

cpe:2.3:a:adcycle:adcycle:1.0:*:*:*:*:*:*:*

cpe:2.3:a:adcycle:adcycle:1.12:*:*:*:*:*:*:*

cpe:2.3:a:adcycle:adcycle:1.13:*:*:*:*:*:*:*

cpe:2.3:a:adcycle:adcycle:1.14:*:*:*:*:*:*:*

cpe:2.3:a:adcycle:adcycle:1.15:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00464

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-w68f-q9jg-mqc8

github

больше 3 лет назад