CVE-2004-2202

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote attackers to bypass authentication and execute other commands on the server's underlying database via the (1) cat_id or (2) sub_id parameters in adDetail.asp, or (2) the password parameter in the login form.

Affected (3)

Products: Duware: Duclassified

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Duware Duclassified	Version 4.0
Duware Duclassified	Version 4.1
Duware Duclassified	Version 4.2

References (10)

http://www.osvdb.org/10668

Source: cve@mitre.org

Exploit

http://www.osvdb.org/10669

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/11363

Source: cve@mitre.org

Exploit

http://www.securitytracker.com/alerts/2004/Oct/1011596.html

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/17685

Source: cve@mitre.org

http://www.osvdb.org/10668

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.osvdb.org/10669

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/11363

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securitytracker.com/alerts/2004/Oct/1011596.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/17685

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.