CVE-2004-1668 Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL commands via the (1) pageid, (2) subid, or (3) catid parameters.
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL commands via the (1) pageid, (2) subid, or (3) catid parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| easyweb factory subjects module | = 2.0 | No fix listed |
References
- 20040910 SQL-Injection in Subjects 2.0 for Postnuke mailing-list
- 12497 exploit patch third-party-advisory vendor-advisory
- 11148 exploit vdb-entry vendor-advisory
- subjects-indexphp-sql-injection(17311) vdb-entry