7.5
CVE-2005-0271
- EPSS 0.53%
- Veröffentlicht 03.01.2005 05:00:00
- Zuletzt bearbeitet 03.04.2025 01:03:51
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showcat.php or (2) product parameter to addfav.php.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Photopost ≫ Reviewpost Php Pro Version <= 2.5.1
Photopost ≫ Reviewpost Php Pro Version1.0.2
Photopost ≫ Reviewpost Php Pro Version2.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.53% | 0.645 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|