CVEブラウザに戻る

CVE-2004-0236

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0530%

EPSS Percentile5.55th

Published2004年11月23日

Last Modified2026年4月16日

Vulnerability Description

SQL injection vulnerability in login.asp in thePHOTOtool allows remote attackers to gain unauthorized access via the password field.

Affected Platforms (CPE)

📦

Steelid

Thephototool

All versions

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=107576894019530&w=2

🔗 http://securitytracker.com/alerts/2004/Feb/1008906.html

🔗 http://www.osvdb.org/6727

🔗 http://www.securityfocus.com/bid/9884

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/15007

🔗 http://marc.info/?l=bugtraq&m=107576894019530&w=2

🔗 http://securitytracker.com/alerts/2004/Feb/1008906.html

🔗 http://www.osvdb.org/6727

関連する脆弱性情報

CVE-2004-041810.0

serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow ...

CVE-2004-090410.0

Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird...

CVE-2004-100610.0

Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via cer...

CVE-2004-129010.0

Buffer overflow in the process_moves function in pgn2web.c for pgn2web 0.3 allows remote attackers to execute arbitrary code via a...