CVE-2004-1588

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in GoSmart Message Board allows remote attackers to execute arbitrary SQL code via the (1) QuestionNumber and Category parameters to Forum.asp or (2) Username and Password parameter to Login_Exec.asp.

Affected (1)

Products: Gosmart: Gosmart Message Board

Gosmart

1 product

Gosmart Message Board

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gosmart Gosmart Message Board	All versions

References (8)

http://marc.info/?l=bugtraq&m=109751522823011&w=2

Source: cve@mitre.org

http://secunia.com/advisories/12790/

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/11361

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/17678

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=109751522823011&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/12790/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/11361

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/17678

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.