NuytsTech Security

CVE-2004-2324

by ·

SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the (1) table and (2) field parameters in LinkClick.aspx.

Date published : 2005-08-16

http://www.securityfocus.com/bid/9518

http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html

Tags: