CVE

Id
10320  
CVE No.
CVE-2004-1893  
Status
Candidate  
Description
Dreamweaver MX, when "Using Driver On Testing Server" or "Using DSN on Testing Server" is selected, uploads the mmhttpdb.asp script to the web site but does not require authentication, which allows remote attackers to obtain sensitive information and possibly execute arbitrary SQL commands via a direct request to mmhttpdb.asp.  
Phase
Assigned (20050504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
71246 10320 CVE-2004-1893 MISC:http://www.nextgenss.com/advisories/dreamweaver.txt  View
71247 10320 CVE-2004-1893 BUGTRAQ:20040403 [securityzone@macromedia.com: New Macromedia Security Zone Bulletin Posted]  View
71248 10320 CVE-2004-1893 URL:http://marc.info/?l=bugtraq&m=108102481929451&w=2  View
71249 10320 CVE-2004-1893 CONFIRM:http://www.macromedia.com/devnet/security/security_zone/mpsb04-05.html  View
71250 10320 CVE-2004-1893 BID:10036  View
71251 10320 CVE-2004-1893 URL:http://www.securityfocus.com/bid/10036  View
71252 10320 CVE-2004-1893 SECUNIA:11284  View
71253 10320 CVE-2004-1893 URL:http://secunia.com/advisories/11284  View
71254 10320 CVE-2004-1893 XF:dreamweaver-test-script-sql-injection(15721)  View

Related JVN