Security Advisory
CVE-2002-1482
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote attackers to gain administrative privileges via SQL code in the password entry.