high7.5Public exploit code
CVE-2000-0125
wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthread…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Wired Community Software WWWThreads 5.0 - SQL Command Input2000-02-03 · remote · cgi · Verified
Impact
wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote attackers to gain privileges for wwwthreads forums.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wired Community Software | Wwwthreads | All versions |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/967
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10002031027120.15921-100000%40eight.wiretrip.net
- http://www.securityfocus.com/bid/967
- http://www.securityfocus.com/templates/archive.pike?list=1&msg=Pine.LNX.4.10.10002031027120.15921-100000%40eight.wiretrip.net