CVE-2005-0271 in ReviewPost PHP Pro

الملخص

بحسب MITRE

Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showcat.php or (2) product parameter to addfav.php.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• حجز: 10/02/2005
• إفشاء: 03/01/2005
• الاعتدال: تمت الموافقة
• إدخال: VDB-23629
• CPE: جاهز
• CWE: CWE-89 (مؤكد)
• استغلال: تحميل
• CVSS: 7.5 (NVD)
• EPSS: 0.01229
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Energy, Finance, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-0271
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-0271
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-0271/