10

CVE-2001-1053

Exploit
AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adcycle ≫ Adcycle Version0.77
Adcycle ≫ Adcycle Version0.77b
Adcycle ≫ Adcycle Version0.78b
Adcycle ≫ Adcycle Version1.0
Adcycle ≫ Adcycle Version1.12
Adcycle ≫ Adcycle Version1.13
Adcycle ≫ Adcycle Version1.14
Adcycle ≫ Adcycle Version1.15
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.44% 0.874
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/bugtraq/2001-07/0249.html
Patch
Vendor Advisory
Exploit
http://www.adcycle.com/cgi-bin/download.cgi?type=UNIX&version=1.17
http://www.securityfocus.com/bid/3032
Patch
Vendor Advisory
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/6837