Back to feed
EUVD-2002-2154 · Published Dec 31, 2002
phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effectively delete other usernames via a short username that matches the end of the targeted username.
Technologies
Php Phpsquidpass
Weaknesses
NVD-CWE-Other
CVSS scores
- v2.04.0
AV:N/AC:L/Au:S/C:N/I:N/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
