Back to CVE Browser

CVE-2004-0236

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0530%

EPSS Percentile5.55th

PublishedNov 23, 2004

Last ModifiedApr 16, 2026

Vulnerability Description

SQL injection vulnerability in login.asp in thePHOTOtool allows remote attackers to gain unauthorized access via the password field.

Affected Platforms (CPE)

📦

Steelid

Thephototool

All versions

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=107576894019530&w=2

🔗 http://securitytracker.com/alerts/2004/Feb/1008906.html

🔗 http://www.osvdb.org/6727

🔗 http://www.securityfocus.com/bid/9884

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/15007

🔗 http://marc.info/?l=bugtraq&m=107576894019530&w=2

🔗 http://securitytracker.com/alerts/2004/Feb/1008906.html

🔗 http://www.osvdb.org/6727

Related Vulnerabilities

CVE-2004-101210.0

The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arb...

CVE-2004-105010.0

Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME a...

CVE-2004-090410.0

Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird...

CVE-2004-176010.0

The default installation of Cisco voice products, when running the IBM Director Agent on IBM servers before OS 2000.2.6, does not ...