Unscored CVE-2002-0878 EUVD-2002-0870GHSA-w567-qh79-jxqc

SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (3) DNS Manager allow…

Published Aug 31, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the login form for LogiSense software including (1) Hawk-i Billing, (2) Hawk-i ASP and (3) DNS Manager allows remote attackers to bypass authentication via SQL code in the password field.

References

20020604 sql injection in Logisense software mailing-list
logisense-sql-injection(9268) vdb-entry
4931 vdb-entry