7.5

CVE-2004-2202

Exploit
Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote attackers to bypass authentication and execute other commands on the server's underlying database via the (1) cat_id or (2) sub_id parameters in adDetail.asp, or (2) the password parameter in the login form.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Duware ≫ Duclassified Version4.0
Duware ≫ Duclassified Version4.1
Duware ≫ Duclassified Version4.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.45% 0.7
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securityfocus.com/bid/11363
Exploit
http://www.securitytracker.com/alerts/2004/Oct/1011596.html
Exploit
http://www.osvdb.org/10668
Exploit
http://www.osvdb.org/10669
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/17685