Lucene search
+L

Ruslan Communications <Body>Builder - Authentication Bypass

🗓️ 13 Jun 2002 00:00:00Reported by Alexander KorchaginType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 22 Views

Vulnerability in Ruslan Communications BodyBuilder allows authentication bypass via SQL injection.

Related
Code
ReporterTitlePublishedViews
Family
cve
CVE
CVE-2002-0951
31 Aug 200204:00
cve
cvelist
Cvelist
CVE-2002-0951
31 Aug 200204:00
cvelist
euvd
EUVD
EUVD-2002-0940
7 Oct 202500:30
euvd
nvd
NVD
CVE-2002-0951
4 Oct 200204:00
nvd
source: https://www.securityfocus.com/bid/5008/info

Ruslan Communications <Body>Builder is a tool designed to assist a user in creating a website. It allows for remote administration through a web interface, and is implemented in Java.

Reportedly, user input supplied as the login password is not adequately filtered. A malicious user may include special characters in the supplied password and modify the SQL query used to validate the user. Access to the administrative interface is possible.

Use login='-- and pass='--

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

26 Sep 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 210
EPSS0.0205
22