- 34,644
- 0
- 18 Дек 2022
- EDB-ID
- 21543
- Проверка EDB
-
- Пройдено
- Автор
- ALEXANDER KORCHAGIN
- Тип уязвимости
- WEBAPPS
- Платформа
- JAVA
- CVE
- cve-2002-0951
- Дата публикации
- 2002-06-13
Код:
source: https://www.securityfocus.com/bid/5008/info
Ruslan Communications <Body>Builder is a tool designed to assist a user in creating a website. It allows for remote administration through a web interface, and is implemented in Java.
Reportedly, user input supplied as the login password is not adequately filtered. A malicious user may include special characters in the supplied password and modify the SQL query used to validate the user. Access to the administrative interface is possible.
Use login='-- and pass='--
- Источник
- www.exploit-db.com