Security Vulnerabilities, CVEs, Published In May 2002 (Sql injection)
admin.asp in AdMentor 2.11 allows remote attackers to bypass authentication and gain privileges via a SQL injection attack on the Login and Password arguments.
Max CVSS
10.0
EPSS Score
0.32%
Published
2002-05-31
Updated
2017-07-11
pforum 1.14 and earlier does not explicitly enable PHP magic quotes, which allows remote attackers to bypass authentication and gain administrator privileges via an SQL injection attack when the PHP server is not configured to use magic quotes by default.
Max CVSS
10.0
EPSS Score
0.19%
Published
2002-05-31
Updated
2016-10-18
userinfo.php in XOOPS 1.0 RC1 allows remote attackers to obtain sensitive information via a SQL injection attack in the "uid" parameter.
Max CVSS
5.0
EPSS Score
0.32%
Published
2002-05-16
Updated
2008-09-11
3 vulnerabilities found