Unscored CVE-2002-2252 EUVD-2002-2231GHSA-m733-2g3q-cc5v

SQL injection vulnerability in auth.inc.php in Thatware 0.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via a b…

Published Oct 14, 2007 · Updated Aug 8, 2024 · Assigned by mitre

Description

SQL injection vulnerability in auth.inc.php in Thatware 0.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via a base64-encoded user parameter.

References

20021201 Thatware (PHP) mailing-list
thatware-authinc-sql-injection(10759) vdb-entry
1005733 vdb-entry