CVE-2002-0951

Опубликовано: 04 окт. 2002

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

SQL injection vulnerability in Ruslan Builder allows remote attackers to gain administrative privileges via a "'--" sequence in the username and password.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-06/0120.html
http://www.iss.net/security_center/static/9359.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5008
Exploit
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-06/0120.html
http://www.iss.net/security_center/static/9359.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/5008
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ruslan_communications:body_builder:*:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01803

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-grx3-5pr4-8456

github

почти 4 года назад

SQL injection vulnerability in Ruslan <Body>Builder allows remote attackers to gain administrative privileges via a "'--" sequence in the username and password.