CVE-2002-1726

secure_inc.php in PhotoDB 1.4 allows remote attackers to bypass authentication via a URL with a large Time parameter, non-empty rmtusername and rmtpassword…

published June 21, 2005

CVSS
—
EPSS
2%
Percentile
76.0
In the wild
Unconfirmed
What it is

secure_inc.php in PhotoDB 1.4 allows remote attackers to bypass authentication via a URL with a large Time parameter, non-empty rmtusername and rmtpassword parameter, and an accesslevel parameter that is lower than the access level of the requested page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01635 · 76.0th percentile
Published
2005-06-21T04:00Z
EPSS history
Timeline
  • 21 JUN 04:00Z
    secure_inc.php in PhotoDB 1.4 allows remote attackers to bypass authentication via a URL with a large Time parameter, non-empty rmtusername and rmtpassword…
    cvelistv5