RSSAmplifier

Sorcery Blog · Jan 26, 2022

Auth Bypass in ADOdb CVE-2021-3850

0
Sign in to vote or save

This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.

I first decided to look at phpPgAdmin after reading this blog post that someone wrote up about abusing it to get a bug bounty. After reading through the source I discovered a bug in the library it was using to interact with Postgres. When a user logs in the username and password is filtered by this function: function adodb_addslashes ($s) { $len = strlen ($s); if ($len == 0 ) return '''' ; if (…

Read on /posts/adodb_auth_bypass/

Comments

Nothing yet. Say the first thing.

    Sign in to join the conversation.