Test ID:	1.3.6.1.4.1.25623.1.0.15453
Category:	CGI abuses
Title:	DUware multiple vulnerabilities
Summary:	NOSUMMARY
Description:	Description: The remote host is running a product published by DUware - either DUclassmate, DUclassified or DUforum. There is a flaw in the remote version of this software which may allow an attacker to execute arbitrary SQL statements on the remote host by supplying malformed values to the arguments of /admin/, messages.asp or messagesDetails.asp. Solution : Upgrade the newest version of this software Risk factor : High
Cross-Ref:	BugTraq ID: 11363 Common Vulnerability Exposure (CVE) ID: CVE-2004-2202 http://www.securityfocus.com/bid/11363 http://www.osvdb.org/10668 http://www.osvdb.org/10669 http://www.securitytracker.com/alerts/2004/Oct/1011596.html XForce ISS Database: duclassified-multiple-sql-injection(17685) https://exchange.xforce.ibmcloud.com/vulnerabilities/17685 Common Vulnerability Exposure (CVE) ID: CVE-2004-2201 http://www.osvdb.org/10664 http://www.osvdb.org/10665 http://www.osvdb.org/10666 http://www.securitytracker.com/alerts/2004/Oct/1011595.html XForce ISS Database: duforum-sql-injection(17680) https://exchange.xforce.ibmcloud.com/vulnerabilities/17680 Common Vulnerability Exposure (CVE) ID: CVE-2004-2200 http://www.osvdb.org/10667 XForce ISS Database: duforum-xss(17681) https://exchange.xforce.ibmcloud.com/vulnerabilities/17681 Common Vulnerability Exposure (CVE) ID: CVE-2004-2199 XForce ISS Database: duclassified-message-xss(17686) https://exchange.xforce.ibmcloud.com/vulnerabilities/17686 Common Vulnerability Exposure (CVE) ID: CVE-2004-2198 http://www.osvdb.org/10663 http://www.securitytracker.com/alerts/2004/Oct/1011597.html XForce ISS Database: duclassmate-password-modification(17682) https://exchange.xforce.ibmcloud.com/vulnerabilities/17682
Copyright	This script is Copyright (C) 2004 Tenable Network Security

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.