high7.5
CVE-2004-1732
SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter.
Impact
SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mydms | Mydms | Versions 1.4, 1.4.1 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109314495007280&w=2
- http://secunia.com/advisories/12340
- http://www.securityfocus.com/bid/10996
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17054
- http://marc.info/?l=bugtraq&m=109314495007280&w=2
- http://secunia.com/advisories/12340
- http://www.securityfocus.com/bid/10996
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17054