Vulnerability Details CVE-2004-1961
blocker.php in Protector System 1.15b1 allows remote attackers to bypass SQL injection protection and execute limited SQL commands via URL-encoded "'" characters ("%27").
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://protector.warcenter.se/article-53--0-0.html
- http://www.securityfocus.com/archive/1/361300/2004-04-21/2004-04-27/0
- http://www.securityfocus.com/bid/10206
- http://www.waraxe.us/index.php?modname=sa&id=25
- http://protector.warcenter.se/article-53--0-0.html
- http://www.securityfocus.com/archive/1/361300/2004-04-21/2004-04-27/0
- http://www.securityfocus.com/bid/10206
- http://www.waraxe.us/index.php?modname=sa&id=25
Products affected by CVE-2004-1961
-
cpe:2.3:a:protector_system:protector_system:1.15b1