Description
Multiple SQL injection vulnerabilities in DUware DUclassmate 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) iState parameter to default.asp or (2) iPro parameter to edit.asp.
Exploits (2)
exploitdb
WRITEUP
VERIFIED
by Dedi Dwianto · textwebappsasp
https://www.exploit-db.com/exploits/25873
exploitdb
WRITEUP
VERIFIED
by Dedi Dwianto · textwebappsasp
https://www.exploit-db.com/exploits/25872
References (3)
Core 3
Core References
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111945219205114&w=2
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/14036
Exploit, Vendor Advisory x_refsource_misc
http://echo.or.id/adv/adv19-theday-2005.txt
Scores
EPSS
0.0032
EPSS Percentile
55.1%
Details
Status
published
Products (1)
duware/duclassmate
1.2
Published
Jun 22, 2005
Tracked Since
Feb 18, 2026