CVE-2004-0374

2004-05-0404:00:00

[email protected]

web.nvd.nist.gov

interchange

security vulnerability

sql injection

remote attack

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.8 Medium

AI Score

Confidence

Low

0.028 Low

EPSS

Percentile

90.6%

JSON

Interchange before 5.0.1 allows remote attackers to “expose the content of arbitrary variables” and read or modify sensitive SQL information via an HTTP request ending with the “SQLUSER” string.

Affected configurations

NVD

Node

interchange_development_groupinterchangeMatch4.8.1

interchange_development_groupinterchangeMatch4.8.2

interchange_development_groupinterchangeMatch4.8.3

interchange_development_groupinterchangeMatch4.8.4

interchange_development_groupinterchangeMatch4.8.5

interchange_development_groupinterchangeMatch4.8.6

interchange_development_groupinterchangeMatch4.8.7

interchange_development_groupinterchangeMatch4.8.8

interchange_development_groupinterchangeMatch4.8.9

interchange_development_groupinterchangeMatch5.0

CPENameOperatorVersion
interchange_development_group:interchangeinterchange development group interchangeeq4.8.1
interchange_development_group:interchangeinterchange development group interchangeeq4.8.2
interchange_development_group:interchangeinterchange development group interchangeeq4.8.3
interchange_development_group:interchangeinterchange development group interchangeeq4.8.4
interchange_development_group:interchangeinterchange development group interchangeeq4.8.5
interchange_development_group:interchangeinterchange development group interchangeeq4.8.6
interchange_development_group:interchangeinterchange development group interchangeeq4.8.7
interchange_development_group:interchangeinterchange development group interchangeeq4.8.8
interchange_development_group:interchangeinterchange development group interchangeeq4.8.9
interchange_development_group:interchangeinterchange development group interchangeeq5.0

CPE	Name	Operator	Version
interchange_development_group:interchange	interchange development group interchange	eq	4.8.1
interchange_development_group:interchange	interchange development group interchange	eq	4.8.2
interchange_development_group:interchange	interchange development group interchange	eq	4.8.3
interchange_development_group:interchange	interchange development group interchange	eq	4.8.4
interchange_development_group:interchange	interchange development group interchange	eq	4.8.5
interchange_development_group:interchange	interchange development group interchange	eq	4.8.6
interchange_development_group:interchange	interchange development group interchange	eq	4.8.7
interchange_development_group:interchange	interchange development group interchange	eq	4.8.8
interchange_development_group:interchange	interchange development group interchange	eq	4.8.9
interchange_development_group:interchange	interchange development group interchange	eq	5.0