CVE-2004-2561

CVE-2004-2561 affects Internet Software Sciences Web+Center 4.0.1 and involves multiple SQL injection vulnerabilities. The issue allows remote attackers to execute arbitrary SQL commands via cookies (ISS_TECH_CENTER_LOGIN in search.asp and cookies in DoCustomerOptions.asp). The connected records ...