high7.5Public exploit code
CVE-2001-0425
AdLibrary.pm in AdCycle 0.78b allows remote attackers to gain privileges to AdCycle via a malformed Agent: header in the HTTP request, which is inserted into a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Adcycle 0.77/0.78 - AdLibrary.pm Session Access2001-02-19 · remote · cgi · Verified
Impact
AdLibrary.pm in AdCycle 0.78b allows remote attackers to gain privileges to AdCycle via a malformed Agent: header in the HTTP request, which is inserted into a resulting SQL query that is used to verify login information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adcycle | Adcycle | Versions 0.77, 0.78b |