CVE-2005-1602

SQL injection vulnerability in login.asp for Net56 Browser Based File Manager 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2005-05-16

Last modified

2024-08-07

Affected products

• File Manager (Net56)

References

• http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0134.html
• http://www.osvdb.org/16544
• http://www.securityfocus.com/bid/13547
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20504