critical10.0
CVE-2001-1053
AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument.
Impact
AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adcycle | Adcycle | Versions 0.77, 0.77b, 0.78b, 1.0, 1.12, 1.13 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0249.html
- http://www.adcycle.com/cgi-bin/download.cgi?type=UNIX&version=1.17
- http://www.securityfocus.com/bid/3032
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6837
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0249.html
- http://www.adcycle.com/cgi-bin/download.cgi?type=UNIX&version=1.17
- http://www.securityfocus.com/bid/3032
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6837