CVE-2001-0425

CVE-2001-0425 describes a critical vulnerability in AdCycle versions 0.77 and 0.78b, specifically within the AdLibrary.pm module. This SQL injection flaw allows unauthenticated remote attackers to gain elevated privileges by manipulating the "Agent:" header in an HTTP request, which is then incorporated into a SQL query used for login verification. With a CVSS score of 7.5 (HIGH), this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to full compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog and lacking Metasploit or Nuclei modules, an exploit is available on ExploitDB, indicating public knowledge of exploitation methods. Despite its age, the high FAUCET Risk Score of 90/100 suggests its potential impact remains significant if unpatched systems are discovered.