SQL Injection Vulnerability in iWebNegar: Remote Code Execution

SQL Injection Vulnerability in iWebNegar: Remote Code Execution

CVE-2004-1402 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:C/A:C

SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string parameter for index.php, (2) comments.php, or (3) the administrator login page.

Learn more about our Web App Pen Testing.