CVE-2001-1053: Adcycle

High severity, CVSS 10.0. EPSS: 3.4% chance of exploitation in the next 30 days.

AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument.

Affected products

• Adcycle Adcycle: version 0.77 only; version 0.77b only; version 0.78b only; version 1.0 only; version 1.12 only; version 1.13 only; …

Published 2001-07-13. Last modified 2026-06-16.