CVE-2002-0287

Published: May 31, 2002Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

pforum 1.14 and earlier does not explicitly enable PHP magic quotes, which allows remote attackers to bypass authentication and gain administrator privileges via an SQL injection attack when the PHP server is not configured to use magic quotes by default.

Affected (1)

Products: Powie: Pforum

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Powie Pforum	Up to 1.14

References (8)

http://marc.info/?l=bugtraq&m=101389284625019&w=2

Source: cve@mitre.org

http://www.iss.net/security_center/static/8203.php

Source: cve@mitre.org

http://www.powie.de/news/index.php

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/4114

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=101389284625019&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/8203.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.powie.de/news/index.php

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securityfocus.com/bid/4114

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.