7.5
CVE-2004-2175
- EPSS 1.24%
- Veröffentlicht 31.12.2004 05:00:00
- Zuletzt bearbeitet 16.06.2026 22:09:10
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginMultiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the (1) product parameter to showproduct.php or (2) cat parameter to showcat.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
All Enthusiast Inc ≫ Reviewpost Php Pro Version2.5
All Enthusiast Inc ≫ Reviewpost Php Pro Version2.5.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.24% | 0.653 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://www.zone-h.org/en/advisories/read/id=3864/
http://secunia.com/advisories/10786/
http://www.securityfocus.com/archive/1/352598
http://www.securityfocus.com/bid/9574
https://exchange.xforce.ibmcloud.com/vulnerabilities/15035