Vulnerabilities > CVE-2001-0848 - Unspecified vulnerability in E-Zone Media Fuse Talk

047910
CVSS 4.6 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
local
low complexity
e-zone-media

Summary

join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon (;) in a form variable.

Vulnerable Configurations

Part Description Count
Application
E-Zone_Media
1