CVE-2004-1402 SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string parameter for index.php, (2) comments.php, or (3) the administrator login page.
HighCVSS 10.0
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string parameter for index.php, (2) comments.php, or (3) the administrator login page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iwebnegar | All versions | No fix listed |
References
- 20041215 iwebnegar is vulnerable to all kind of sql injections mailing-list
- 11946 exploit vdb-entry
- iwebnegar-sql-injection(18505) vdb-entry