Vulnerabilities > CVE-2002-0709 - SQL Injection vulnerability in Surfcontrol Superscout web Filter and web Filter

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
surfcontrol
exploit available
NVD
Published: 2002-10-10
Updated: 2016-10-18

Summary

SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL queries via the RunReport option to SimpleBar.dll, and possibly other DLLs.

Vulnerable Configurations

Part Description Count
Application
Surfcontrol
4

Exploit-Db

descriptionSurfControl SuperScout WebFilter for windows 2000 SQL Injection Vulnerability. CVE-2002-0709. Remote exploit for windows platform
idEDB-ID:21898
last seen2016-02-02
modified2002-10-02
published2002-10-02
reporterMatt Moore
sourcehttps://www.exploit-db.com/download/21898/
titleSurfControl SuperScout WebFilter for windows 2000 SQL Injection Vulnerability

References