CVE-2002-2305

SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the (1) agentname or (2) agentpassword parameter.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2002-12-31

Last modified

2024-08-08

Weaknesses

CWE-89

Affected products

• Immobilier (Phpsecure.org)

References

• http://archives.neohapsis.com/archives/bugtraq/2002-11/0307.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10705