high7.5
CVE-2004-1668
Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL commands via the (1) pageid…
Impact
Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL commands via the (1) pageid, (2) subid, or (3) catid parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Easyweb | Factory Subjects Module | Version 2.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109483089621955&w=2
- http://secunia.com/advisories/12497
- http://www.securityfocus.com/bid/11148
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17311
- http://marc.info/?l=bugtraq&m=109483089621955&w=2
- http://secunia.com/advisories/12497
- http://www.securityfocus.com/bid/11148
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17311