high7.5Public exploit code
CVE-2002-0536
PHPGroupware 0.9.12 and earlier, when running with the magic_quotes_gpc feature disabled, allows remote attackers to compromise the database via a SQL injectio…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- phpGroupWare 0.9.13 - Debian Package Configuration2002-04-03 · remote · linux · Verified
Impact
PHPGroupware 0.9.12 and earlier, when running with the magic_quotes_gpc feature disabled, allows remote attackers to compromise the database via a SQL injection attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpgroupware | Phpgroupware | Version 0.9.13 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0036.html
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0143.html
- http://www.iss.net/security_center/static/8755.php
- http://www.osvdb.org/5153
- http://www.securityfocus.com/bid/4424
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0036.html
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0143.html
- http://www.iss.net/security_center/static/8755.php
- http://www.osvdb.org/5153
- http://www.securityfocus.com/bid/4424