Vulnerability in Surfcontrol Superscout Web Filter

CVE-2002-0709

SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL queries via the RunReport option to SimpleBar.dll, and possibly other DLLs.

EPSS: 0.011 (63.3th percentile) — read the EPSS interpretation.

Affected products

Surfcontrol Superscout_web_filter — versions 3.0, 3.0.3
Surfcontrol Web_filter — versions 4.0, 4.1
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)