Description
phpRank 1.8 does not properly check the return codes for MySQL operations when authenticating users, which could allow remote attackers to authenticate using a NULL password when database errors occur or if the database is unavailable.
References
- 5948 vdb-entry
- 20021010 Multiple vulnerabilities in phpRank mailing-list
- phprank-null-bypass-authentication(10353) vdb-entry