PT-2003-1218 · Phpgb · Phpgb

Published 2003-03-18 · Updated 2008-09-05 · CVE-2002-1482

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions phpGB versions 1.20 and earlier

Description The issue allows remote attackers to gain administrative privileges via SQL code in the password entry, specifically in the login.php file when magic quotes gpc is not enabled.

Recommendations For phpGB versions 1.20 and earlier, consider disabling the login functionality in login.php until a patch is available, and ensure magic quotes gpc is enabled to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2002-1482

Affected Products

Phpgb

References · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-09/0076.html · Exploit
• 🔥 https://exploit-db.com/exploits/21778 · Exploit
• 🔥 http://securityfocus.com/bid/5673 · Exploit
• http://iss.net/security_center/static/10068.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1482 · Security Note