high7.5
CVE-2002-1952
phpRank 1.8 does not properly check the return codes for MySQL operations when authenticating users, which could allow remote attackers to authenticate using a…
Impact
phpRank 1.8 does not properly check the return codes for MySQL operations when authenticating users, which could allow remote attackers to authenticate using a NULL password when database errors occur or if the database is unavailable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phprank | Phprank | Version 1.8 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0148.html
- http://www.iss.net/security_center/static/10353.php
- http://www.securityfocus.com/bid/5948
- http://archives.neohapsis.com/archives/bugtraq/2002-10/0148.html
- http://www.iss.net/security_center/static/10353.php
- http://www.securityfocus.com/bid/5948