CVE-2004-2324

Published: Dec 31, 2004Modified: Apr 24, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the (1) table and (2) field parameters in LinkClick.aspx.

Affected (5)

Products: Dnnsoftware: Dotnetnuke

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Dnnsoftware Dotnetnuke	Version 1.0.10d
Dnnsoftware Dotnetnuke	Version 1.0.6
Dnnsoftware Dotnetnuke	Version 1.0.7
Dnnsoftware Dotnetnuke	Version 1.0.8
Dnnsoftware Dotnetnuke	Version 1.0.9

References (10)

http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/10747

Source: cve@mitre.org

http://www.osvdb.org/3750

Source: cve@mitre.org

http://www.securityfocus.com/bid/9518

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/14973

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/10747

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/3750

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/9518

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/14973

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.