CVE

Id
10987  
CVE No.
CVE-2004-2561  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Internet Software Sciences Web+Center 4.0.1 allow remote attackers to execute arbitrary SQL commands via (1) the ISS_TECH_CENTER_LOGIN cookie in search.asp and (2) one or more cookies in DoCustomerOptions.asp.  
Phase
Assigned (20051122)  
Votes
None (candidate not yet proposed)  
Comments