admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-12-16 20:27:21 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2004/CVE-2004-1611.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

795 B
Raw Blame History

CVE-2004-1611

Description

SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) execute arbitrary SLX commands on the server or spoof the server via a man-in-the-middle (MITM) attack, or (2) obtain the database password via a GetConnection request to TCP port 1707.

POC

Reference

Github

No PoCs found on GitHub currently.