CVE-2004-2066

Опубликовано: 29 июл. 2004

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the (1) linpha_userid or (2) linpha_password cookies.

Ссылки

http://marc.info/?l=bugtraq&m=109112246805277&w=2
http://secunia.com/advisories/12189
Vendor Advisory
http://www.osvdb.org/8272
http://www.securityfocus.com/bid/10827
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16834
http://marc.info/?l=bugtraq&m=109112246805277&w=2
http://secunia.com/advisories/12189
Vendor Advisory
http://www.osvdb.org/8272
http://www.securityfocus.com/bid/10827
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16834

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:linpha:linpha:0.9.0:*:*:*:*:*:*:*

cpe:2.3:a:linpha:linpha:0.9.1:*:*:*:*:*:*:*

cpe:2.3:a:linpha:linpha:0.9.2:*:*:*:*:*:*:*

cpe:2.3:a:linpha:linpha:0.9.3:*:*:*:*:*:*:*

cpe:2.3:a:linpha:linpha:0.9.4:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.01399

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-mj8m-9pmq-j4m7

github

больше 4 лет назад