Lucene search
HistoryNov 23, 2004 - 5:00 a.m.
CVE-2004-0239
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.9 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.2%
SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauthorized access via the photo variable.
Affected configurations
Node
photopostphotopost_php_proMatch3.1
ORphotopostphotopost_php_proMatch3.2
ORphotopostphotopost_php_proMatch3.3
ORphotopostphotopost_php_proMatch4.0
ORphotopostphotopost_php_proMatch4.1
ORphotopostphotopost_php_proMatch4.6
Related
cvelist
cvelist
CVE-2004-0239
2004-03-18 05:00:00
cve
cve
CVE-2004-0239
2004-11-23 05:00:00
nessus
nessus
Photopost PHP Pro photo Parameter SQL Injection
2004-02-03 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.9 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.2%
Related for NVD:CVE-2004-0239