CVE-2004-0374: Medium severity Interchange Development Group Interchange vulnerability
Published Apr 6, 2004
·Updated
Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "SQLUSER" string.
Affected Software
10 affected components
Interchange Development Group Interchange=4.8.4
Interchange Development Group Interchange=4.8.1
Interchange Development Group Interchange=4.8.3
Interchange Development Group Interchange=5.0
Interchange Development Group Interchange=4.8.9
Interchange Development Group Interchange=4.8.6
Interchange Development Group Interchange=4.8.7
Interchange Development Group Interchange=4.8.5
Interchange Development Group Interchange=4.8.8
Interchange Development Group Interchange=4.8.2
Remediation
Patch Available
Event History
Apr 6, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description