Vulnerability record · CVE-2002-2175 · published 31 December 2002
CVE-2002-2175: Phpsquidpass vulnerability
Php · Phpsquidpass
phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effectively delete other usernames via a short username that matches the end of the targeted username.
Description
phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effectively delete other usernames via a short username that matches the end of the targeted username.
AV:N/AC:L/Au:S/C:N/I:N/A:P
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://marc.info/?l=bugtraq&m=102508071021631&w=2 | |
| http://sourceforge.net/forum/forum.php?forum_id=188359 | PatchVendor Advisory |
| http://www.iss.net/security_center/static/9417.php | PatchVendor Advisory |
| http://www.securityfocus.com/bid/5090 | PatchVendor Advisory |
| http://marc.info/?l=bugtraq&m=102508071021631&w=2 | |
| http://sourceforge.net/forum/forum.php?forum_id=188359 | PatchVendor Advisory |
| http://www.iss.net/security_center/static/9417.php | PatchVendor Advisory |
| http://www.securityfocus.com/bid/5090 | PatchVendor Advisory |
Track CVE-2002-2175 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Source: NIST National Vulnerability Database (record CVE-2002-2175), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
