CVE-2004-2175

Description

Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the (1) product parameter to showproduct.php or (2) cat parameter to showcat.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/15035

https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-2167

http://www.zone-h.org/en/advisories/read/id=3864/

http://www.securityfocus.com/bid/9574

http://www.securityfocus.com/archive/1/352598

http://secunia.com/advisories/10786/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS