CVE-2004-2542

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in Dynix (formerly known as epixtech) WebPAC allow remote attackers to execute arbitrary SQL commands via unknown attack vectors, resulting in an ability to execute stored procedures, bypass login authentication, and cause an unspecified denial of service to backend databases.

Affected products

Dynix Webpac: all versions

References

http://archives.neohapsis.com/archives/bugtraq/2004-08/0354.html
http://securitytracker.com/id?1011073
http://www.osvdb.org/9274
http://www.securityfocus.com/bid/11037
https://exchange.xforce.ibmcloud.com/vulnerabilities/17128
http://archives.neohapsis.com/archives/bugtraq/2004-08/0354.html
http://securitytracker.com/id?1011073
http://www.osvdb.org/9274
http://www.securityfocus.com/bid/11037
https://exchange.xforce.ibmcloud.com/vulnerabilities/17128

Get alerted when CVE-2004-2542 or the next vulnerability affects your stack