← Database

CVE-2004-1402

CRITICAL CVSS: 10.0 Published: 2004-12-31 Modified: 2026-06-16

Description

SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via (1) the string parameter for index.php, (2) comments.php, or (3) the administrator login page.

Affected Platforms

Iwebnegar Iwebnegar

Weakness Type

NVD-CWE-Other

References