CVE-2002-2252

Atthat.com Thatware < 0.5 - SQL Injection

Title source: rule

Description

SQL injection vulnerability in auth.inc.php in Thatware 0.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via a base64-encoded user parameter.

References (3)

[Exploit] http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html

[Exploit] http://securitytracker.com/id?1005733

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/10759

Scores

EPSS 0.0039

EPSS Percentile 59.9%

Classification

CWE

CWE-89

Status draft

Affected Products (1)

atthat.com/thatware < 0.5

Timeline

Published Dec 31, 2002

Tracked Since Feb 18, 2026