7.5

CVE-2004-1870

Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' passwords via the (1) photo parameter to addfav.php, (2) photo parameter to comments.php, (3) credit parameter to comments.php, (4) cat parameter to index.php, (5) ppuser parameter to showgallery.php, (6) cat parameter to showgallery.php, (7) cat parameter to uploadphoto.php, (8) albumid parameter to useralbums.php, or (9) albumid parameter to useralbums.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Photopost ≫ Photopost Php Pro Version3.1
Photopost ≫ Photopost Php Pro Version3.2
Photopost ≫ Photopost Php Pro Version3.3
Photopost ≫ Photopost Php Pro Version4.0
Photopost ≫ Photopost Php Pro Version4.1
Photopost ≫ Photopost Php Pro Version4.6
Photopost ≫ Photopost Php Pro Version4.8.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.16% 0.63
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=108057790723123&w=2
http://secunia.com/advisories/11241
Vendor Advisory
http://securitytracker.com/id?1009571
Vendor Advisory
http://www.securityfocus.com/bid/9994
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15642