high7.5Public exploit code
CVE-2003-0377
SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versions, allows remote attackers to insert a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IISProtect 2.1/2.2 - Web Administration Interface SQL Injection2003-05-23 · webapps · asp · Verified
Impact
SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versions, allows remote attackers to insert arbitrary SQL and execute code via certain variables, as demonstrated using the GroupName variable in SiteAdmin.ASP.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iisprotect | Iisprotect | through 2.2 |