← back
CVE-2004-2324

CVE-2004-2324

EPSS 1.2%
SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the (1) table and (2) field parameters in LinkClick.aspx.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.htmlhttp://secunia.com/advisories/10747https://exchange.xforce.ibmcloud.com/vulnerabilities/14973http://www.osvdb.org/3750http://www.securityfocus.com/bid/9518