Back
CVE-2004-2324
SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d allows remote attackers to modify the backend database via the (1) table and (2) field parameters in LinkClick.aspx.
Published: Dec 31, 2004
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (5)
| Vendor | Product | Version |
|---|---|---|
| dnnsoftware | dotnetnuke | 1.0.6 |
| dnnsoftware | dotnetnuke | 1.0.7 |
| dnnsoftware | dotnetnuke | 1.0.8 |
| dnnsoftware | dotnetnuke | 1.0.9 |
| dnnsoftware | dotnetnuke | 1.0.10d |
GitHub Security Advisory GHSA-v66q-3846-whq7
SQL injection vulnerability in DotNetNuke (formerly IBuySpy Workshop) 1.0.6 through 1.0.10d...
References (10)
- http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html Patch, Vendor Advisory
- http://secunia.com/advisories/10747
- http://www.osvdb.org/3750
- http://www.securityfocus.com/bid/9518 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14973
- http://archives.neohapsis.com/archives/fulldisclosure/2004-01/1161.html Patch, Vendor Advisory
- http://secunia.com/advisories/10747
- http://www.osvdb.org/3750
- http://www.securityfocus.com/bid/9518 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14973
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
1.22%
Top 34% most likely to be exploited
Threat Score
30.4 / 100
Data Sources
NVD
EPSS
GitHub