Lucene search
HistoryNov 23, 2004 - 5:00 a.m.
CVE-2004-0250
cve-2004-0250
sql injection
photopost php pro
security vulnerability
remote attackers
privileges
8.4 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.003 Low
EPSS
Percentile
68.2%
SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter in showproduct.php or (2) the cat parameter in showcat.php.
Affected configurations
Node
photopostphotopost_php_proMatch3.1
ORphotopostphotopost_php_proMatch3.2
ORphotopostphotopost_php_proMatch3.3
ORphotopostphotopost_php_proMatch4.0
ORphotopostphotopost_php_proMatch4.1
ORphotopostphotopost_php_proMatch4.6
8.4 High
AI Score
Confidence
Low
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.003 Low
EPSS
Percentile
68.2%
Related for CVE-2004-0250