Unscored CVE-2004-1668 EUVD-2004-1662GHSA-wj9g-86pf-x73r

Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL command…

Published Feb 20, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL commands via the (1) pageid, (2) subid, or (3) catid parameters.

References

11148 vdb-entry
subjects-indexphp-sql-injection(17311) vdb-entry
20040910 SQL-Injection in Subjects 2.0 for Postnuke mailing-list
12497 third-party-advisory