CVE-2004-2175 in Reviewpost Php Pro

요약

\~에 의해 MITRE

Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the (1) product parameter to showproduct.php or (2) cat parameter to showcat.php.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• 예약하다: 2005. 07. 10.
• 공개: 2004. 12. 31.
• 모더레이션: 수락
• 항목: VDB-23087
• CPE: 준비됨
• CWE: CWE-89 (확인됨)
• 익스플로잇: 다운로드
• CVSS: 7.5 (NVD)
• EPSS: 0.01239
• KEV: 아니요
• 활동: 매우 낮음
• 부문: Energy, Insurance, ...

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-2175
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-2175
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-2175/