Remote Code Execution Vulnerability in Interchange by ICDevGroup
CVE-2004-0374

Currently unrated

Key Information:

Vendor: Interchange Development Group
Status: Interchange
Vendor: CVE Published:; 4 May 2004

🔔 Create Interchange Development Group Vulnerability Alert

What is CVE-2004-0374?

Interchange versions prior to 5.0.1 are susceptible to an exploitation technique that allows remote attackers to expose content from arbitrary variables through specially crafted HTTP requests. This vulnerability enables attackers to read or modify sensitive SQL information by appending the string 'SQLUSER' to their requests, thus posing risks to data integrity and confidentiality for affected users.

References

http://www.icdevgroup.org/pipermail/interchange-announce/...

mailing-listx_refsource_MLIST

http://www.securityfocus.com/bid/10005

vdb-entryx_refsource_BID

http://ftp.icdevgroup.org/interchange/5.0/WHATSNEW

x_refsource_CONFIRM

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 4, 2004
Vulnerability Reserved
Mar 29, 2004

CVE-2004-0374 Data

JSON