Unscored CVE-2001-1053 EUVD-2001-1034GHSA-w68f-q9jg-mqc8

AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $p…

Published Jun 25, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument.

References

20010713 AdCycle SQL Command Insertion Vulnerability - qDefense Advisory Number QDAV-2001-7-2 mailing-list
http://www.adcycle.com/cgi-bin/download.cgi?type=UNIX&version=1.17
3032 vdb-entry
adcycle-insert-sql-command(6837) vdb-entry