CVE-2002-1699 in ASP Client Check

Riassunto

di MITRE

SQL injection vulnerability in ASP Client Check (ASPCC) 1.3 and 1.5 allows remote attackers to bypass authentication and gain unauthorized access via the password field.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 21/06/2005
• Divulgazione: 31/12/2002
• Moderazione: accettato
• Voce: VDB-19343
• CPE: pronto
• CWE: CWE-89 (confermato)
• CVSS: 9.8 (VulDB)
• EPSS: 0.02563
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1699
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1699
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1699/