First published: Thu May 03 2001(Updated: )
NewsDaemon before 0.21b allows remote attackers to execute arbitrary SQL queries and gain privileges via a malformed user_username parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sourceforge Newsdaemon | =0.21b |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2001-0234 is considered a high severity vulnerability due to the potential for remote code execution.
To fix CVE-2001-0234, upgrade NewsDaemon to version 0.21b or later to eliminate the vulnerability.
CVE-2001-0234 affects users of NewsDaemon versions prior to 0.21b.
The vulnerability in CVE-2001-0234 allows remote attackers to execute arbitrary SQL queries due to a malformed user_username parameter.
Yes, CVE-2001-0234 can lead to unauthorized access and privilege escalation for attackers.