DUware DUclassmate 1.x - 'edit.asp?iPro' SQL Injection
| EKU-ID: 31208 | CVE: CVE-2005-2049;OSVDB-17589 | OSVDB-ID: |
| Author: Dedi Dwianto | Published: 2005-06-01 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 31208 | CVE: CVE-2005-2049;OSVDB-17589 | OSVDB-ID: |
| Author: Dedi Dwianto | Published: 2005-06-01 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
source: https://www.securityfocus.com/bid/14036/info DUclassmate is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation. http://www.example.com/DUclassmate/admin/edit.asp?iPro=[SQL Inject]