medium6.8Public exploit code
CVE-2009-0853
login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special ch…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- celerbb 0.0.2 - Multiple Vulnerabilities2009-03-05 · webapps · php · Verified
Impact
login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special characters in the Username parameter, as demonstrated by an admin'# parameter value.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stewart Howe | Celerbb | Version 0.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/501481/100/0/threaded
- http://www.securityfocus.com/bid/34014
- https://www.exploit-db.com/exploits/8161
- http://www.securityfocus.com/archive/1/501481/100/0/threaded
- http://www.securityfocus.com/bid/34014
- https://www.exploit-db.com/exploits/8161