Vulnerability in Duware Duclassmate

CVE-2005-2049

Multiple SQL injection vulnerabilities in DUware DUclassmate 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) iState parameter to default.asp or (2) iPro parameter to edit.asp.

EPSS: 0.024 (82.4th percentile) — read the EPSS interpretation.

Affected products

Duware Duclassmate — versions 1.2
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)