CVE-2004-2175 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 1.2% (pctl 68)
Patch early
A public exploit exists.
Description
Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the (1) product parameter to showproduct.php or (2) cat parameter to showcat.php.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 1.24% — more likely to be exploited than 68% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2004-12-31 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| all enthusiast inc | reviewpost php pro |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | All Enthusiast ReviewPost PHP Pro 2.5 - 'showproduct.php' SQL Injection | 2004-02-04 |
| exploit-db | All Enthusiast ReviewPost PHP Pro 2.5 - 'showcat.php' SQL Injection | 2004-02-04 |
References
- http://secunia.com/advisories/10786/
- http://www.securityfocus.com/archive/1/352598
- http://www.securityfocus.com/bid/9574
- http://www.zone-h.org/en/advisories/read/id=3864/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15035
- http://secunia.com/advisories/10786/
- http://www.securityfocus.com/archive/1/352598
- http://www.securityfocus.com/bid/9574
- http://www.zone-h.org/en/advisories/read/id=3864/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15035
→ the Explorer · watch your stack · NVD