QwikSec

Security Database

CVE

CWE

Training

CVE-2002-2175

Published: Nov 16, 2005

Modified: Aug 8, 2024

PUBLISHED

Description

phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effectively delete other usernames via a short username that matches the end of the targeted username.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

phpsquidpass-user-deletion(9417)

vdb-entry

x_refsource_XF

http://sourceforge.net/forum/forum.php?forum_id=188359

x_refsource_CONFIRM

20020623 phpsquidpass: unauthorized user deleting

mailing-list

x_refsource_BUGTRAQ

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.