CVE-2004-1402

The CVE-2004-1402 entry concerns iWebNegar, a PHP web log application. The vulnerability is a SQL injection affecting multiple entry points: the string parameter for index.php, comments.php, and the administrator login page. The underlying cause is unsanitized input that allows attackers to injec...