PT-2002-1357 · Php+1 · Php+1

Published 2002-05-31 · Updated 2016-10-18 · CVE-2002-0287

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions pforum versions 1.14 and earlier

Description The issue allows remote attackers to bypass authentication and gain administrator privileges via an SQL injection attack when the PHP server is not configured to use magic quotes by default, due to the lack of explicit enabling of PHP magic quotes.

Recommendations For versions 1.14 and earlier, enable PHP magic quotes to prevent SQL injection attacks.

Fix

Related Identifiers

CVE-2002-0287

Affected Products

Php

Pforum

References · 5

• http://powie.de/news/index.php · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2002-0287 · Security Note
• http://securityfocus.com/bid/4114 · Note
• http://iss.net/security_center/static/8203.php · Note
• http://marc.info/?l=bugtraq&m=101389284625019&w=2 · Note