| Package | Affected versions | Patched versions |
|---|---|---|
| celerbb | = 0.0.2 |
login.php in CelerBB 0.0.2, when magic_quotes_gpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special characters in the Username parameter, as demonstrated by an admin'# parameter value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free