CVE-2002-2175: PHP Phpsquidpass

Medium severity, CVSS 4.0. EPSS: 5.8% chance of exploitation in the next 30 days.

phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effectively delete other usernames via a short username that matches the end of the targeted username.

Affected products

• PHP Phpsquidpass: any version

Published 2002-12-31. Last modified 2026-06-16.