high7.5
CVE-2004-2471
SQL injection vulnerability in the sloth TCL script in QuoteEngine before 1.2.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
Impact
SQL injection vulnerability in the sloth TCL script in QuoteEngine before 1.2.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jamesoff | Quoteengine | Versions 1.0, 1.1 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/11255
- http://sourceforge.net/project/shownotes.php?release_id=227554
- http://www.securityfocus.com/bid/10017
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15685
- http://secunia.com/advisories/11255
- http://sourceforge.net/project/shownotes.php?release_id=227554
- http://www.securityfocus.com/bid/10017
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15685