Lucene search
HistoryDec 31, 2004 - 5:00 a.m.
CVE-2004-2324
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.005
Percentile
76.8%
SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the (1) table and (2) field parameters in LinkClick.aspx.
Affected configurations
Node
dotnetnukedotnetnukeMatch1.0.6
ORdotnetnukedotnetnukeMatch1.0.7
ORdotnetnukedotnetnukeMatch1.0.8
ORdotnetnukedotnetnukeMatch1.0.9
ORdotnetnukedotnetnukeMatch1.0.10d
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dotnetnuke | dotnetnuke | 1.0.6 | cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.6:*:*:*:*:*:*:* |
| dotnetnuke | dotnetnuke | 1.0.7 | cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.7:*:*:*:*:*:*:* |
| dotnetnuke | dotnetnuke | 1.0.8 | cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.8:*:*:*:*:*:*:* |
| dotnetnuke | dotnetnuke | 1.0.9 | cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.9:*:*:*:*:*:*:* |
| dotnetnuke | dotnetnuke | 1.0.10d | cpe:2.3:a:dotnetnuke:dotnetnuke:1.0.10d:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
Low
EPSS
0.005
Percentile
76.8%
Related for NVD:CVE-2004-2324