Lucene search
HistoryOct 10, 2002 - 4:00 a.m.
CVE-2002-0709
cve-2002-0709
sql injection
surfcontrol superscout
webfilter
remote attackers
arbitrary sql queries
simplebar.dll
dlls
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.9%
SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL queries via the RunReport option to SimpleBar.dll, and possibly other DLLs.
Affected configurations
Node
surfcontrolsuperscout_web_filterMatch3.0
ORsurfcontrolsuperscout_web_filterMatch3.0.3
ORsurfcontrolweb_filterMatch4.0
ORsurfcontrolweb_filterMatch4.1
Related
cvelist
cvelist
CVE-2002-0709
2002-10-03 04:00:00
nvd
nvd
CVE-2002-0709
2002-10-10 04:00:00
securityvulns
securityvulns
wp--02-0005: Multiple Vulnerabilities in SuperScout Web Reports Server
2002-10-03 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.4 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.9%
Related for CVE-2002-0709