Unscored CVE-2004-2066 EUVD-2004-2058GHSA-mj8m-9pmq-j4m7

SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication …

Published May 10, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the (1) linpha_userid or (2) linpha_password cookies.

References

8272 vdb-entry
20040729 Linpha 0.9.4: authentication bypass mailing-list
10827 vdb-entry
12189 third-party-advisory
linpha-cookie-gain-access(16834) vdb-entry