CVE-2004-2324

Description

SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the (1) table and (2) field parameters in LinkClick.aspx.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/14973

http://www.securityfocus.com/bid/9518

http://www.osvdb.org/3750

http://secunia.com/advisories/10747

http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS