Unrated severityNVD Advisory· Published Oct 4, 2002· Updated Apr 16, 2026
CVE-2002-0995
CVE-2002-0995
Description
login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to "insert," which adds the provided username to the adminUsers table.
Affected products
4cpe:2.3:a:gianluca_baldo:phpauction:1.2:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:gianluca_baldo:phpauction:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:gianluca_baldo:phpauction:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:gianluca_baldo:phpauction:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:gianluca_baldo:phpauction:2.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.securityfocus.com/bid/5141nvdExploitVendor Advisory
- www.iss.net/security_center/static/9462.phpnvdVendor Advisory
- archives.neohapsis.com/archives/bugtraq/2002-07/0014.htmlnvd
- www.phpauction.org/viewnew.phpnvd
News mentions
0No linked articles in our index yet.