CVE-2004-2202

CVE-2004-2202 affects DUware DUclassified 4.0–4.2. The vulnerability arises from SQL injection in adDetail.asp via (1) cat_id or (2) sub_id parameters, and in the login form via the password parameter, enabling remote attackers to bypass authentication and execute commands on the server’s underly...