SQL Injection Flaw in Password Protect by Password Protect
CVE-2004-1647

Currently unrated

Key Information:

Vendor: Web Animations
Status: Password Protect
Vendor: CVE Published:; 30 August 2004

🔔 Create Web Animations Vulnerability Alert

What is CVE-2004-1647?

The SQL injection vulnerability in Password Protect allows remote attackers to exploit specific parameters in various ASP pages. By manipulating inputs such as 'admin' or 'Pass' in index_next.asp, and 'LoginId', 'OPass', or 'NPass' in CPassChangePassword.asp, attackers can execute arbitrary SQL statements. Additionally, flaws in users_edit.asp and users_add.asp further expose the system to potential unauthorized access and authentication bypass, enabling attackers to compromise the security integrity of the application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch