CVE-2003-0377

SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versions, allows remote attackers to insert arbitrary SQL and execute code via certain variables, as demonstrated using the GroupName variable in SiteAdmin.ASP.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2003-06-16

Last modified

2024-08-08

Weaknesses

CWE-89

Affected products

• Iisprotect (Iisprotect)

References

• http://marc.info/?l=bugtraq&m=105370528728225&w=2