VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 31, 2002· Updated Jun 16, 2026

CVE-2002-1952

CVE-2002-1952

Description

phpRank 1.8 does not properly check the return codes for MySQL operations when authenticating users, which could allow remote attackers to authenticate using a NULL password when database errors occur or if the database is unavailable.

Affected products

2
  • Phprank/Phprank2 versions
    cpe:2.3:a:phprank:phprank:1.8:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:phprank:phprank:1.8:*:*:*:*:*:*:*
    • (no CPE)range: =1.8

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.