Lucene search
HistoryMay 31, 2002 - 4:00 a.m.
CVE-2002-0308
admentor
authentication bypass
sql injection
cve-2002-0308
remote attackers
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.9 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.8%
admin.asp in AdMentor 2.11 allows remote attackers to bypass authentication and gain privileges via a SQL injection attack on the Login and Password arguments.
Affected configurations
Node
stefan_holmbergadmentorMatch2.11
| CPE | Name | Operator | Version |
|---|---|---|---|
| stefan_holmberg:admentor | stefan holmberg admentor | eq | 2.11 |
Related
openvas
openvas
AdMentor Login Flaw
2005-11-03 00:00:00
cvelist
cvelist
CVE-2002-0308
2002-05-03 04:00:00
nvd
nvd
CVE-2002-0308
2002-05-31 04:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.9 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.8%
Related for CVE-2002-0308