PT-2002-2673 · Phprank · Phprank

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-1952

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpRank version 1.8

Description The issue arises from improper checking of return codes for MySQL operations during user authentication. This could allow remote attackers to authenticate using a NULL password under certain conditions, such as when database errors occur or if the database is unavailable.

Recommendations For phpRank version 1.8, ensure proper error handling for MySQL operations during user authentication to prevent unauthorized access. Consider implementing additional checks to verify the authenticity of user credentials, especially when database errors are encountered or the database is unavailable.

Fix

Related Identifiers

CVE-2002-1952

Affected Products

Phprank

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1952 · Security Note
• http://securityfocus.com/bid/5948 · Note
• http://iss.net/security_center/static/10353.php · Note
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0148.html · Note