CVE-2002-2175

phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to…

published November 16, 2005

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effectively delete other usernames via a short username that matches the end of the targeted username.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05838 · 93.1th percentile
Published
2005-11-16T21:17Z
EPSS history
Timeline
  • 16 NOV 21:17Z
    phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to…
    cvelistv5