Back

CVE-2003-0500

SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name.

Published: Aug 7, 2003 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
proftpd_project proftpd 1.2.9_rc1

GitHub Security Advisory GHSA-wggx-8v47-w9m4

SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for...

References (4)

Risk Scores

CVSS Score 10.0 / 10
EPSS Score 18.27%

Top 3% most likely to be exploited

Threat Score 45.5 / 100

Data Sources

NVD EPSS GitHub