high7.5
CVE-2003-1458
SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote attackers to execute arbitrary SQL commands via the member name.
Impact
SQL injection vulnerability in Profile.php in ttCMS 2.2 and ttForum allows remote attackers to execute arbitrary SQL commands via the member name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ttcms | Ttcms | Version 2.2 |
| Ttcms | Ttforum | Version 1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/3278
- http://www.securityfocus.com/archive/1/321000
- http://www.securityfocus.com/bid/7543
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12273
- http://securityreason.com/securityalert/3278
- http://www.securityfocus.com/archive/1/321000
- http://www.securityfocus.com/bid/7543
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12273