CVE
- Id
- 4998
- CVE No.
- CVE-2002-0607
- Status
- Candidate
- Description
- members.asp in Snitz Forums 2000 version 3.3.03 and earlier allows remote attackers to execute arbitrary code via a SQL injection attack on the parameters (1) M_NAME, (2) UserName, (3) FirstName, (4) LastName, or (5) INITIAL.
- Phase
- Proposed (20020611)
- Votes
- ACCEPT(3) Baker, Cole, Frech | NOOP(3) Cox, Foat, Wall
- Comments