CVE-2004-2202

DUclassified 4.x - 'adDetail.asp' Multiple SQL Injections

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2004-2202 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.

Description

Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote attackers to bypass authentication and execute other commands on the server's underlying database via the (1) cat_id or (2) sub_id parameters in adDetail.asp, or (2) the password parameter in the login form.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBDUclassified 4.x - 'adDetail.asp' Multiple SQL InjectionsExploitDB exploitby Soroosh DaliliNot analyzed1 file
ExploitDB
PoC details

References

6