high7.5
CVE-2001-1348
TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter.
Impact
TWIG 2.6.2 and earlier allows remote attackers to perform unauthorized database operations via a SQL injection attack on the id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Twig Development Team | Twig | Versions 2.0, 2.0.1, 2.0.2, 2.0.3, 2.0_beta1, 2.0_beta2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0260.html
- http://twig.screwdriver.net/index.php3
- http://www.iss.net/security_center/static/6619.php
- http://www.securityfocus.com/bid/2791
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0260.html
- http://twig.screwdriver.net/index.php3
- http://www.iss.net/security_center/static/6619.php
- http://www.securityfocus.com/bid/2791