CVE-2001-0418

content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content database by inserting SQL characters into the id parameter.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

2.77% chance of exploitation in the next 30 days, 85th percentile

Published

2001-05-24

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/20752

References

• CVE Record
• NVD entry

Related

• CVE-2001-0414
• CVE-2001-0419
• CVE-2001-0409
• CVE-2001-0421
• CVE-2001-0407
• CVE-2001-0422