CVE-2004-2201

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.29%

Published

Dec 31, 2004

Modified

Jun 16, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBDUforum 3.x - 'messageDetail.asp?MSG_ID' SQL Injection Exploit-DBDUforum 3.x - 'messages.asp?FOR_ID' SQL Injection Exploit-DBDUforum 3.x - Login Form 'Password' SQL Injection

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL injection vulnerability in DUware DUforum 3.0 through 3.1 allows remote attackers to execute arbitrary SQL commands via the FOR_ID parameter in messages.asp, (2) MSG_ID parameter in messageDetail.asp, or (3) password parameter in the login form.

Affected Products (2)

duware · duforumvulnerable

References (12)

http://www.osvdb.org/10664

http://www.osvdb.org/10665

http://www.osvdb.org/10666

http://www.securityfocus.com/bid/11363

Exploit

http://www.securitytracker.com/alerts/2004/Oct/1011595.html

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/17680

http://www.osvdb.org/10664

http://www.osvdb.org/10665

http://www.osvdb.org/10666

http://www.securityfocus.com/bid/11363

Exploit

http://www.securitytracker.com/alerts/2004/Oct/1011595.html

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/17680

KEV Catalog EPSS Scores Vendors All CVEs