CVE-2004-0374 Information disclosure in n/a
Remote attackers can expose arbitrary variables and read or modify sensitive SQL information via a crafted HTTP request in Interchange.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2004-0374?
CVE-2004-0374 is a medium-severity vulnerability in n/a, published on 6 Apr 2004. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "__SQLUSER__" string.
Which versions are affected by CVE-2004-0374?
It affects 1 product.
Products include Interchange Development Group Interchange.
How do I fix CVE-2004-0374?
Upgrade to a fixed version.
Is CVE-2004-0374 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2004-0374 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as DSA-471, GHSA-v6q8-f3pg-p46q.