Unscored CVE-2004-0625 EUVD-2004-0624GHSA-mggc-5qcw-3q96

SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges via the login page.

Published Jun 30, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges via the login page.

References

20040627 ZH2004-14SA (security advisory):Sql Injection in Infinity WEB mailing-list
20040627 ZH2004-14SA (security advisory):Sql Injection in Infinity WEB mailing-list
infinity-web-sql-injection(16513) vdb-entry
http://www.zone-h.org/en/advisories/read/id=4892/
10614 vdb-entry