CVE-2004-2737

Affected software: NetSupport DNA HelpDesk 1.01. ** vulnerability:** SQL injection in problist.asp via the where parameter. Impact as described: remote attackers can execute arbitrary SQL commands through the vulnerable parameter. The available documents do not detail exploitation vectors beyond ...

CVE-2004-2737: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in problist.asp in NetSupport DNA HelpDesk 1.01 allows remote attackers to execute arbitrary SQL commands via the where parameter...