CVE-2004-1843

EPSS 1.2%

SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID parameter to (1) resend.asp or (2) news_view.asp.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/23851unverified exploitdbwww.exploit-db.com/exploits/23852unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://marc.info/?l=bugtraq&m=107999697625786&w=2 http://secunia.com/advisories/11179 http://securitytracker.com/id?1009508 https://exchange.xforce.ibmcloud.com/vulnerabilities/15551 http://www.securityfocus.com/bid/9931