Lucene search
HistoryNov 23, 2004 - 5:00 a.m.
CVE-2004-0250
cve-2004-0250
sql injection
photopost php pro
security vulnerability
remote attackers
privileges
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.4 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.4%
SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter in showproduct.php or (2) the cat parameter in showcat.php.
Affected configurations
Node
photopostphotopost_php_proMatch3.1
ORphotopostphotopost_php_proMatch3.2
ORphotopostphotopost_php_proMatch3.3
ORphotopostphotopost_php_proMatch4.0
ORphotopostphotopost_php_proMatch4.1
ORphotopostphotopost_php_proMatch4.6
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.4 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.4%
Related for CVE-2004-0250