PT-2004-2962 · Linpha · Linpha

Fernando Quintero + 1 · Published 2004-07-29 · Updated 2017-07-11 · CVE-2004-2066

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions LinPHA version 0.9.4

Description The issue allows remote attackers to execute arbitrary SQL code and bypass authentication. This is achieved via the linpha userid or linpha password cookies.

Recommendations For LinPHA version 0.9.4, update to a version that fixes the SQL injection issue to prevent remote attackers from executing arbitrary SQL code and bypassing authentication.

Exploit

Fix

Related Identifiers

CVE-2004-2066

Affected Products

Linpha

References · 6

• 🔥 http://securityfocus.com/bid/10827 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2066 · Security Note
• http://secunia.com/advisories/12189 · Vendor Advisory
• http://osvdb.org/8272 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16834 · Note
• http://marc.info/?l=bugtraq&m=109112246805277&w=2 · Note