Lucene search
HistoryMay 04, 2004 - 4:00 a.m.
CVE-2004-0374
interchange
security vulnerability
sql injection
remote attack
7.1 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.028 Low
EPSS
Percentile
90.5%
Interchange before 5.0.1 allows remote attackers to “expose the content of arbitrary variables” and read or modify sensitive SQL information via an HTTP request ending with the “SQLUSER” string.
Related
osv
osv
interchange - missing input sanitising
2004-04-02 00:00:00
openvas
openvas
Debian Security Advisory DSA 471-1 (interchange)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-471)
2008-01-17 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 471-1] New interchange packages fix information leak
2004-04-03 00:00:00
cvelist
cvelist
CVE-2004-0374
2004-04-06 04:00:00
nessus
nessus
Debian DSA-471-1 : interchange - missing input sanitising
2004-09-29 00:00:00
debian
debian
[SECURITY] [DSA 471-1] New interchange packages fix information leak
2004-04-02 00:00:00
[SECURITY] [DSA 471-1] New interchange packages fix information leak
2004-04-02 16:51:54
7.1 High
AI Score
Confidence
Low
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
0.028 Low
EPSS
Percentile
90.5%
Related for CVE-2004-0374