1. CVE-Search
  2. CVE-2004-2175
ID CVE-2004-2175
Summary Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the (1) product parameter to showproduct.php or (2) cat parameter to showcat.php.
References
Vulnerable Configurations
  • cpe:2.3:a:all_enthusiast_inc:reviewpost_php_pro:2.5:*:*:*:*:*:*:*
    cpe:2.3:a:all_enthusiast_inc:reviewpost_php_pro:2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:all_enthusiast_inc:reviewpost_php_pro:2.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:all_enthusiast_inc:reviewpost_php_pro:2.5.1:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 11-07-2017 - 01:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 9574
bugtraq 20040204 ZH2004-04SA (security advisory): Multiple Sql Injection Vulnerabilities in ReviewPost PHP Pro
misc http://www.zone-h.org/en/advisories/read/id=3864/
secunia 10786
xf reviewpostpro-showproduct-sql-injection(15035)
Last major update 11-07-2017 - 01:31
Published 31-12-2004 - 05:00
Last modified 11-07-2017 - 01:31
Back to Top