CVE

Id
10750  
CVE No.
CVE-2004-2324  
Status
Candidate  
Description
SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the (1) table and (2) field parameters in LinkClick.aspx.  
Phase
Assigned (20050816)  
Votes
None (candidate not yet proposed)  
Comments