CVE-2004-2542 Multiple SQL injection vulnerabilities in Dynix (formerly known as epixtech) WebPAC allow remote attackers to execute arbitrary SQL commands via unknown attack vectors, resulting in an ability to exec...
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in Dynix (formerly known as epixtech) WebPAC allow remote attackers to execute arbitrary SQL commands via unknown attack vectors, resulting in an ability to execute stored procedures, bypass login authentication, and cause an unspecified denial of service to backend databases.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dynix webpac | All versions | No fix listed |
References
- 20040824 Dynix Webpac Input Validation mailing-list
- 1011073 vdb-entry
- 9274 vdb-entry
- 11037 vdb-entry
- webpac-sql-injection(17128) vdb-entry