NVD

Id
72248  
Name
CVE-2004-1870  
Description
Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' passwords via the (1) photo parameter to addfav.php, (2) photo parameter to comments.php, (3) credit parameter to comments.php, (4) cat parameter to index.php, (5) ppuser parameter to showgallery.php, (6) cat parameter to showgallery.php, (7) cat parameter to uploadphoto.php, (8) albumid parameter to useralbums.php, or (9) albumid parameter to useralbums.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-03-29  
Modified Date
2017-07-10  
Seq
2004-1870  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
373050 72248 CVE-2004-1870 20040328 PhotoPost PHP Pro Multiple Vulnerabilities  View
373051 72248 CVE-2004-1870 1009571  View
373052 72248 CVE-2004-1870 9994  View
373053 72248 CVE-2004-1870 photopost-php-sql-injection(15642)  View

Related JVN