CVE-2004-1668 in Factory Subjects Module

Summary

Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL commands via the (1) pageid, (2) subid, or (3) catid parameters.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 02/21/2005
• Disclosure: 09/10/2004
• Moderation: VulDB entry created
• Entries: 1: VDB-22203
• CPE: ready
• CWE: CWE-89 (Confirmed)
• CVSS: 7.3
• EPSS: 0.00927
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-1668
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-1668
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-1668/