CVE-2004-1843

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Expinion.net Member Management System 2.1 - 'resend.asp?ID' SQL Injection2004-03-20 · webapps · asp · Verified
• Expinion.net Member Management System 2.1 - 'news_view.asp?ID' SQL Injection2004-03-20 · webapps · asp · Verified

Impact

SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID parameter to (1) resend.asp or (2) news_view.asp.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

References

• NVD record
• CVE.org record
• http://marc.info/?l=bugtraq&m=107999697625786&w=2
• http://secunia.com/advisories/11179
• http://securitytracker.com/id?1009508
• http://www.securityfocus.com/bid/9931
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15551
• http://marc.info/?l=bugtraq&m=107999697625786&w=2
• http://secunia.com/advisories/11179
• http://securitytracker.com/id?1009508
• http://www.securityfocus.com/bid/9931
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15551