CVE-2004-2201

SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to execute arbitrary SQL commands via the FOR_ID parameter in…

published July 10, 2005

CVSS
—
EPSS
1%
Percentile
69.8
In the wild
Unconfirmed
What it is

SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to execute arbitrary SQL commands via the FOR_ID parameter in messages.asp, (2) MSG_ID parameter in messageDetail.asp, or (3) password parameter in the login form.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01290 · 69.8th percentile
Published
2005-07-10T04:00Z
EPSS history
Timeline
  • 10 JUL 04:00Z
    SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to execute arbitrary SQL commands via the FOR_ID parameter in…
    cvelistv5