Back
CVE-2004-1843
SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID parameter to (1) resend.asp or (2) news_view.asp.
Published: Mar 20, 2004
Modified: Jun 16, 2026
CVSS Metrics
GitHub Security Advisory GHSA-vwg6-cfrq-8wvg
SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute...
References (10)
- http://marc.info/?l=bugtraq&m=107999697625786&w=2
- http://secunia.com/advisories/11179 Exploit, Patch, Vendor Advisory
- http://securitytracker.com/id?1009508 Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/9931 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15551
- http://marc.info/?l=bugtraq&m=107999697625786&w=2
- http://secunia.com/advisories/11179 Exploit, Patch, Vendor Advisory
- http://securitytracker.com/id?1009508 Exploit, Patch, Vendor Advisory
- http://www.securityfocus.com/bid/9931 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15551
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
1.24%
Top 33% most likely to be exploited
Threat Score
30.4 / 100
Data Sources
NVD
EPSS
GitHub