Unscored severity · published Aug 20, 2004
CVE-2004-1732
SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter
–
CVSS
1.3%
EPSS
No
On KEV
Description
SQL injection vulnerability in out.ViewFolder.php in MyDMS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the folderid parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MY
Mydms · Mydms
1.4; 1.4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-1732
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-1732
marc.info
http://marc.info/?l=bugtraq&m=109314495007280&w=2
Patch
http://secunia.com/advisories/12340
Exploit
http://www.securityfocus.com/bid/10996
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17054
More from Mydms
–
CVE-2004-1733
Directory traversal vulnerability in MyDMS 1.4.2 and other versions allows remote registered users to read arbitrary files via