Security Advisory

CVE-2003-0377

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2003-06-06 04:00:00

Last updated 2024-08-08 01:50:47

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versions, allows remote attackers to insert arbitrary SQL and execute code via certain variables, as demonstrated using the GroupName variable in SiteAdmin.ASP.

← Browse all CVEs View on cve.org ↗