SQL Injection in Iisprotect
CVE-2003-0377
SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versions, allows remote attackers to insert arbitrary SQL and execute code via certain variables, as demonstrated using the GroupName variable in SiteAdmin.ASP.
Vulnerability class: SQL Injection
EPSS: 0.025 (82.9th percentile) — read the EPSS interpretation.
Affected products
- Iisprotect
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Third Party Advisory)