CVE-2004-2668: SQL Injection

Q: Which deployments should be treated as exposed?

Interchange versions before 4.8.9 should be treated as affected. The issue is remotely exploitable and does not require authentication according to the supplied severity vector.

Q: What level of access does an attacker need to exploit this issue?

An attacker can exploit the vulnerability over the network with low attack complexity and no authentication. Successful exploitation allows arbitrary SQL commands and may affect confidentiality, integrity, and availability.

Published Dec 31, 2004

Updated

SQL injection vulnerability in Interchange before 4.8.9 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

Affected Software

18 affected components

Interchange Development Group Interchange<=4.8.8

Interchange Development Group Interchange=4.8.0

Interchange Development Group Interchange=4.8.1

Interchange Development Group Interchange=4.8.2

Interchange Development Group Interchange=4.8.3

Interchange Development Group Interchange=4.8.4

Interchange Development Group Interchange=4.8.5

Interchange Development Group Interchange=4.8.6

Interchange Development Group Interchange=4.8.7

Interchange Development Group Interchange=4.8.4

Interchange Development Group Interchange=4.8.1

Interchange Development Group Interchange=4.8.3

Interchange Development Group Interchange=4.8.0

Interchange Development Group Interchange<=4.8.8

Interchange Development Group Interchange=4.8.6

Interchange Development Group Interchange=4.8.7

Interchange Development Group Interchange=4.8.5

Interchange Development Group Interchange=4.8.2

Event History

Dec 31, 2004

CVE Published

05:00 AM

Dec 29, 2006

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

Which deployments should be treated as exposed?

Interchange versions before 4.8.9 should be treated as affected. The issue is remotely exploitable and does not require authentication according to the supplied severity vector.

What level of access does an attacker need to exploit this issue?

An attacker can exploit the vulnerability over the network with low attack complexity and no authentication. Successful exploitation allows arbitrary SQL commands and may affect confidentiality, integrity, and availability.

CVE-2004-2668: SQL Injection

Affected Software

Event History

Frequently Asked Questions

Which deployments should be treated as exposed?

What level of access does an attacker need to exploit this issue?

Company

Resources

Contact

Frequently Asked Questions

Which deployments should be treated as exposed?

What level of access does an attacker need to exploit this issue?