CVE

Id
9981  
CVE No.
CVE-2004-1553  
Status
Candidate  
Description
SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the cat parameter to album.asp. NOTE: it was later reported that vector 1 affects aspWebAlbum 3.2, and the vector involves the txtUserName parameter in a processlogin action to album.asp, as reachable from the login action.  
Phase
Assigned (20050220)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
68302 9981 CVE-2004-1553 BUGTRAQ:20040923 aspWebCalendar /aspWebAlbum: SQL injection  View
68303 9981 CVE-2004-1553 URL:http://marc.info/?l=bugtraq&m=109604910025090&w=2  View
68304 9981 CVE-2004-1553 MILW0RM:6357  View
68305 9981 CVE-2004-1553 URL:http://www.milw0rm.com/exploits/6357  View
68306 9981 CVE-2004-1553 MILW0RM:6420  View
68307 9981 CVE-2004-1553 URL:http://www.milw0rm.com/exploits/6420  View
68308 9981 CVE-2004-1553 BID:11246  View
68309 9981 CVE-2004-1553 URL:http://www.securityfocus.com/bid/11246  View
68310 9981 CVE-2004-1553 BID:30996  View
68311 9981 CVE-2004-1553 URL:http://www.securityfocus.com/bid/30996  View
68312 9981 CVE-2004-1553 OSVDB:47913  View
68313 9981 CVE-2004-1553 URL:http://osvdb.org/47913  View
68314 9981 CVE-2004-1553 OSVDB:47914  View
68315 9981 CVE-2004-1553 URL:http://osvdb.org/47914  View
68316 9981 CVE-2004-1553 SECUNIA:31649  View
68317 9981 CVE-2004-1553 URL:http://secunia.com/advisories/31649  View
68318 9981 CVE-2004-1553 XF:aspwebalbum-sql-injection(17507)  View
68319 9981 CVE-2004-1553 URL:http://xforce.iss.net/xforce/xfdb/17507  View
68320 9981 CVE-2004-1553 XF:aspwebalbum-album-sql-injection(44877)  View
68321 9981 CVE-2004-1553 URL:http://xforce.iss.net/xforce/xfdb/44877  View
68322 9981 CVE-2004-1553 XF:aspwebalbum-image-file-upload(44876)  View

Related JVN