CVE-2002-0581: Workforceroi Xpede

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

WorkforceROI Xpede 4.1 allows remote attackers to execute arbitrary SQL commands and read, modify, or steal credentials from the database via the Qry parameter in the sprc.asp script.

Affected products

• Workforceroi Xpede: version 4.1 only

Published 2002-06-18. Last modified 2026-06-16.