← Back

All Enthusiast Inc

all_enthusiast_inc

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Reviewpost Php Pro
reviewpost_php_pro
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-4864
1All Enthusiast Inc
1Reviewpost Php Pro
Apr 16, 2026
Sep 19, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP remote file inclusion vulnerability in index.php in All Enthusiast ReviewPost 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the RP_PATH parameter.
CVE-2004-2175
1All Enthusiast Inc
1Reviewpost Php Pro
Apr 16, 2026
Dec 31, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the (1) product parameter to showproduct.php or (2) cat parameter to showcat.php.