CVEvulnerability

CVE-2004-2175

7.5 HIGH Published 2004-12-31 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2004-12-31
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the (1) product parameter to showproduct.php or (2) cat parameter to showcat.php.

Affected configurations

• all enthusiast inc reviewpost php pro 2.5 • all enthusiast inc reviewpost php pro 2.5.1

References

http://secunia.com/advisories/10786/ Patch, Vendor Advisory
http://www.securityfocus.com/archive/1/352598 Exploit, Patch
http://www.securityfocus.com/bid/9574 Exploit
http://www.zone-h.org/en/advisories/read/id=3864/ Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/15035 exchange.xforce.ibmcloud.com
http://secunia.com/advisories/10786/ Patch, Vendor Advisory
http://www.securityfocus.com/archive/1/352598 Exploit, Patch
http://www.securityfocus.com/bid/9574 Exploit
http://www.zone-h.org/en/advisories/read/id=3864/ Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/15035 exchange.xforce.ibmcloud.com