Unscored CVE-2004-2324 EUVD-2004-2316GHSA-v66q-3846-whq7

SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to modify the backend d…

Published Aug 16, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the (1) table and (2) field parameters in LinkClick.aspx.

References

10747 third-party-advisory
9518 vdb-entry
3750 vdb-entry
dotnetnuke-multiple-sql-injection(14973) vdb-entry
20040128 Dotnetnuke Multiple Vulnerabilities mailing-list