CVE-2004-2561 Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the ISS_TECH_CENTER_LOGIN cookie in search.asp an...
HighCVSS 7.5
EPSS 1.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the ISS_TECH_CENTER_LOGIN cookie in search.asp and (2) one or more cookies in DoCustomerOptions.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| internet sofware sciences web+center | = 4.0.1 | No fix listed |
References
- 12121 third-party-advisory vendor-advisory
- 8180 exploit vdb-entry
- www.securiteam.com exploit vendor-advisory
- 10771 exploit vdb-entry
- webcenter-cookie-sql-injection(16775) vdb-entry