CVE-2004-2202 Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote attackers to bypass authentication and execute other commands on the server's underlying database via the (1...
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote attackers to bypass authentication and execute other commands on the server's underlying database via the (1) cat_id or (2) sub_id parameters in adDetail.asp, or (2) the password parameter in the login form.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| duware duclassified | = 4.0 | No fix listed |
| duware duclassified | = 4.1 | No fix listed |
| duware duclassified | = 4.2 | No fix listed |
References
- 10668 exploit vdb-entry
- 10669 exploit vdb-entry
- 11363 exploit vdb-entry
- 1011596 exploit vdb-entry
- duclassified-multiple-sql-injection(17685) vdb-entry