Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-1647. PoCs published by Criolabs.
AI-analyzed exploit summary This is a vulnerability writeup describing SQL injection and XSS vulnerabilities in Password Protect. It provides URLs with parameters vulnerable to injection but does not include executable exploit code.
Description
SQL injection vulnerability in Password Protect allows remote attackers to execute arbitrary SQL statements and bypass authentication via (1) admin or Pass parameter to index_next.asp, (2) LoginId, OPass, or NPass to CPassChangePassword.asp, (3) users_edit.asp, or (4) users_add.asp.
Exploits (1)
This is a vulnerability writeup describing SQL injection and XSS vulnerabilities in Password Protect. It provides URLs with parameters vulnerable to injection but does not include executable exploit code.