critical10.0Public exploit code
CVE-2002-0951
SQL injection vulnerability in Ruslan <Body>Builder allows remote attackers to gain administrative privileges via a "'--" sequence in the username and password.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ruslan Communications <Body>Builder - Authentication Bypass2002-06-13 · webapps · java · Verified
Impact
SQL injection vulnerability in Ruslan <Body>Builder allows remote attackers to gain administrative privileges via a "'--" sequence in the username and password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ruslan Communications | Body Builder | All versions |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0120.html
- http://www.iss.net/security_center/static/9359.php
- http://www.securityfocus.com/bid/5008
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0120.html
- http://www.iss.net/security_center/static/9359.php
- http://www.securityfocus.com/bid/5008