3 matches found
CVE-2001-0234
NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed userusername parameter...
8AI score0.01771EPSS
SaveExploits1References3
CVE-2001-0234
NewsDaemon is affected prior to version 0.21b, where a malformed user_username parameter allows remote attackers to execute arbitrary SQL queries and gain administrative privileges on the web site. The issue enables remote access to administer NewsDaemon through the web interface. Remediation: up...
7.5CVSS8AI score0.01771EPSS
SaveExploits1References3Affected Software1
20