Unscored severity · published Jun 16, 2003
CVE-2003-0377
SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versions, allows remote attackers to insert arbitrary SQL and…
–
CVSS
2.5%
EPSS
No
On KEV
Description
SQL injection vulnerability in the web-based administration interface for iisPROTECT 2.2-r4, and possibly earlier versions, allows remote attackers to insert arbitrary SQL and execute code via certain variables, as demonstrated using the GroupName variable in SiteAdmin.ASP.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
II
Iisprotect · Iisprotect
through 2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0377
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0377
Third Party Advisory
http://marc.info/?l=bugtraq&m=105370528728225&w=2
More from Iisprotect
–
CVE-2003-0317
iisPROTECT 2.1 and 2.2 allows remote attackers to bypass authentication via an HTTP request containing URL-encoded characters