CVE-2002-0995
login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login...
login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to "insert," which adds the provided username to the adminUsers table.
Exploit likelihood
What each source reports
NVD Score used
login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to "insert," which adds the provided username to the adminUsers table.
- Record
CVE-2002-0995- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to "insert," which adds the provided username to the adminUsers table.
- Record
CVE-2002-0995- Updated
- 2026-11-02
EUVDEUVD-2002-0984 No score
login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to "insert," which adds the provided username to the adminUsers table.
- Record
EUVD-2002-0984- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cw72-x4ww-6v8j No score
login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login...
login.php for PHPAuction allows remote attackers to gain privileges via a direct call to login.php with the action parameter set to "insert," which adds the provided username to the adminUsers table.
- Record
GHSA-cw72-x4ww-6v8j- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | phpAuction 1/2 - Unauthorized Administrative Access | 2002-07-02 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-0995 is a high vulnerability (CVSS 7.5) in Gianluca Baldo Phpauction, published October 4, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.82%, the 86th percentile. No source names a fixed version.