NVD

Id
72271  
Name
CVE-2004-1893  
Description
Dreamweaver MX, when "Using Driver On Testing Server" or "Using DSN on Testing Server" is selected, uploads the mmhttpdb.asp script to the web site but does not require authentication, which allows remote attackers to obtain sensitive information and possibly execute arbitrary SQL commands via a direct request to mmhttpdb.asp.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-1893  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
373139 72271 CVE-2004-1893 20040403 [securityzone@macromedia.com: New Macromedia Security Zone Bulletin Posted]  View
373140 72271 CVE-2004-1893 http://www.macromedia.com/devnet/security/security_zone/mpsb04-05.html  View
373141 72271 CVE-2004-1893 http://www.nextgenss.com/advisories/dreamweaver.txt  View
373142 72271 CVE-2004-1893 10036  View
373143 72271 CVE-2004-1893 dreamweaver-test-script-sql-injection(15721)  View

Related JVN