8.2 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.9%
SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers to execute arbitrary SQL commands via the iCity parameter. NOTE: the iState parameter is already covered by CVE-2005-2049.
securityreason.com/securityalert/1997
www.aria-security.com/forum/showthread.php?t=59
www.securityfocus.com/archive/1/453318/100/0/threaded
www.securityfocus.com/bid/24637
exchange.xforce.ibmcloud.com/vulnerabilities/30672