Unscored CVE-2004-0250 EUVD-2004-0250GHSA-rfg7-c2cq-64vm

SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter i…

Published Mar 18, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter in showproduct.php or (2) the cat parameter in showcat.php.

References

photopostphp-sql-injection(15008) vdb-entry
20040204 ZH2004-04SA (security advisory): Multiple Sql Injection mailing-list
9557 vdb-entry
http://www.zone-h.org/en/advisories/read/id=3864/