CVE-2002-0961 Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as other users, e.g. by deleting clients via dltclnt.php, possibly in a SQL injection at...
HighCVSS 7.5
EPSS 1.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Vulnerabilities in Voxel Dot Net CBMS 0.7 and earlier allow remote attackers to conduct unauthorized operations as other users, e.g. by deleting clients via dltclnt.php, possibly in a SQL injection attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| voxel cbms | <= 0.7 | No fix listed |
References
- 20020606 CBMS: XSS and SQL Injection holes mailing-list
- cbms-php-sql-injection(9295) vdb-entry vendor-advisory
- 4957 exploit vdb-entry vendor-advisory