CVE-2004-2175

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the (1) product parameter to showproduct.php or (2) cat parameter to showcat.php.

Affected (2)

Products: All Enthusiast Inc: Reviewpost Php Pro

All Enthusiast Inc

1 product

Reviewpost Php Pro

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
All Enthusiast Inc Reviewpost Php Pro	Version 2.5.1
All Enthusiast Inc Reviewpost Php Pro	Version 2.5

References (10)

http://secunia.com/advisories/10786/

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/archive/1/352598

Source: cve@mitre.org

ExploitPatch

http://www.securityfocus.com/bid/9574

Source: cve@mitre.org

Exploit

http://www.zone-h.org/en/advisories/read/id=3864/

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/15035

Source: cve@mitre.org

http://secunia.com/advisories/10786/