CVE-2003-0752

Description

SQL injection vulnerability in global.php3 of AttilaPHP 3.0, and possibly earlier versions, allows remote attackers to bypass authentication via a modified cook_id parameter.

Affected products

• attila-php.net / attilaphp3.0

References

• MISChttp://archives.neohapsis.com/archives/vulnwatch/2003-q3/0090.html