CVE-2002-2335

CVE-2002-2335 affects Killer Protection 1.0, where the vars.inc include file is stored under the web root with insufficient access control. This allows remote attackers to obtain user names and passwords and to log in using protection.php. The connected documents confirm the vulnerability descrip...