CVE-2002-0709 SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL queries via the RunReport option to SimpleBar.dll, and poss...
HighCVSS 7.5
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL queries via the RunReport option to SimpleBar.dll, and possibly other DLLs.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| surfcontrol superscout web filter | = 3.0 | No fix listed |
| surfcontrol superscout web filter | = 3.0.3 | No fix listed |
| surfcontrol web filter | = 4.0 | No fix listed |
| surfcontrol web filter | = 4.1 | No fix listed |
References
- 20021002 wp--02-0005: Multiple Vulnerabilities in SuperScout Web Reports Server mailing-list
- superscout-webfilter-sql-injection(10245) vdb-entry
- 5859 vdb-entry