critical10.0
CVE-2004-0236
SQL injection vulnerability in login.asp in thePHOTOtool allows remote attackers to gain unauthorized access via the password field.
Impact
SQL injection vulnerability in login.asp in thePHOTOtool allows remote attackers to gain unauthorized access via the password field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Steelid | Thephototool | All versions |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107576894019530&w=2
- http://securitytracker.com/alerts/2004/Feb/1008906.html
- http://www.osvdb.org/6727
- http://www.securityfocus.com/bid/9884
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15007
- http://marc.info/?l=bugtraq&m=107576894019530&w=2
- http://securitytracker.com/alerts/2004/Feb/1008906.html
- http://www.osvdb.org/6727
- http://www.securityfocus.com/bid/9884
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15007