CVE-2009-0853
Published Mar 9, 2009login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special characters in the User…
Vendor/product archive
3 CVEs tagged to stewart_howe / celerbb — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.
login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special characters in the User…
showme.php in CelerBB 0.0.2 allows remote attackers to obtain "reserved information" via the user parameter.
Multiple SQL injection vulnerabilities in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) vi…