CVE-2002-0709: Surfcontrol Superscout Web Filter

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerabilities in the Web Reports Server for SurfControl SuperScout WebFilter allow remote attackers to execute arbitrary SQL queries via the RunReport option to SimpleBar.dll, and possibly other DLLs.

Affected products

• Surfcontrol Superscout Web Filter: version 3.0 only; version 3.0.3 only
• Surfcontrol Web Filter: version 4.0 only; version 4.1 only

Published 2002-10-10. Last modified 2026-06-16.