CVE-2002-1482: Phpgb

High severity, CVSS 10.0. EPSS: 3.7% chance of exploitation in the next 30 days.

SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote attackers to gain administrative privileges via SQL code in the password entry.

Affected products

• Phpgb Phpgb: version 1.10 only; version 1.20 only; version 1.30 only

Published 2003-04-22. Last modified 2026-06-16.