CVE-2004-1962

CVE-2004-1962 describes a SQL injection vulnerability in Protector System 1.15b1, specifically within the index.php file. This flaw allows remote attackers to bypass SQL injection filters by inserting "/**/" sequences into targeted fields, potentially leading to unauthorized data access, modification, or deletion. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or inclusion in CISA's KEV catalog, exploit code is publicly available via ExploitDB, though community discussion and media coverage are minimal.