CVE-2009-0853

login.php in CelerBB 0.0.2, when magicquotesgpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special characters in the Username parameter, as demonstrated by an admin' parameter value...

CVE-2009-0853

login.php in CelerBB 0.0.2, when magicquotesgpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special characters in the Username parameter, as demonstrated by an admin' parameter value...

CVE-2009-0853

CVE-2009-0853 affects CelerBB 0.0.2. When magic_quotes_gpc is disabled, remote attackers can bypass authentication and gain administrative access by submitting a crafted Username value (e.g., admin'#) to login.php. Verified in multiple sources; impact is authentication bypass with partial confide...