Published: 20/03/2004 Updated: 11/07/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 760

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in Member Management System 2.1 allows remote malicious users to execute arbitrary SQL via the ID parameter to (1) resend.asp or (2) news_view.asp.

Vulnerable Product	Search on Vulmon	Subscribe to Product

source: wwwsecurityfocuscom/bid/9931/info It has been reported that Member Management System may be prone to a SQL injection vulnerability that may allow a remote attacker to inject malicious SQL syntax into database queries The problem is reported to exist in the 'ID' parameter contained within the 'resendasp' and 'news_viewasp' scrip ...

source: wwwsecurityfocuscom/bid/9931/info It has been reported that Member Management System may be prone to a SQL injection vulnerability that may allow a remote attacker to inject malicious SQL syntax into database queries The problem is reported to exist in the 'ID' parameter contained within the 'resendasp' and 'news_viewasp' scri ...

NVD-CWE-Other http://www.securityfocus.com/bid/9931 http://securitytracker.com/id?1009508 http://secunia.com/advisories/11179 http://marc.info/?l=bugtraq&m=107999697625786&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/15551 https://nvd.nist.gov https://www.exploit-db.com/exploits/23851/

CVE-2004-1843

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect