high7.5
CVE-2004-2324
SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the (1) …
Impact
SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the (1) table and (2) field parameters in LinkClick.aspx.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dnnsoftware | Dotnetnuke | Versions 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10d |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html
- http://secunia.com/advisories/10747
- http://www.osvdb.org/3750
- http://www.securityfocus.com/bid/9518
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14973
- http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html
- http://secunia.com/advisories/10747
- http://www.osvdb.org/3750
- http://www.securityfocus.com/bid/9518
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14973