Unscored CVE-2005-0302 EUVD-2005-0303GHSA-fp2p-m8rg-2hfh

SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via th…

Published Feb 10, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in default.asp in BackOffice Lite 6.0 and 6.01 allows remote attackers to execute arbitrary SQL commands via the referer field in the HTTP header.

References

20050121 bug report comersus Back Office Lite 6.0 and 6.0.1 mailing-list
http://www.securiteam.com/windowsntfocus/5TP0Q0UEKI.html
backoffice-lite-sql-injection(19013) vdb-entry