CVE-2004-2561

EPSS 1.2%

Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the ISS_TECH_CENTER_LOGIN cookie in search.asp and (2) one or more cookies in DoCustomerOptions.asp.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/24298unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/12121 https://exchange.xforce.ibmcloud.com/vulnerabilities/16775 http://www.osvdb.org/8180 http://www.securiteam.com/windowsntfocus/5RP0N0ADGK.html http://www.securityfocus.com/bid/10771