CVE-2003-0500

Fixed in a distro release EPSS 18%

SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name.

Published 2003-07-04 · CVE record · OSV

Products: proftpd_project proftpd

Distro releases