Vulnerabilities > CVE-2002-0308 - Remote SQL Injection vulnerability in Stefan Holmberg Admentor 2.11

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
stefan-holmberg
critical

Summary

admin.asp in AdMentor 2.11 allows remote attackers to bypass authentication and gain privileges via a SQL injection attack on the Login and Password arguments.

Vulnerable Configurations

Part Description Count
Application
Stefan_Holmberg
1