CVE-2004-2202

2005-07-1004:00:00

mitre

www.cve.org

8.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.1%

JSON

Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote attackers to bypass authentication and execute other commands on the server’s underlying database via the (1) cat_id or (2) sub_id parameters in adDetail.asp, or (2) the password parameter in the login form.