Vulnerability in All Enthusiast Inc Reviewpost PHP Pro

CVE-2004-2175

Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the (1) product parameter to showproduct.php or (2) cat parameter to showcat.php.

EPSS: 0.012 (66.1th percentile) — read the EPSS interpretation.

Affected products

All_enthusiast_inc Reviewpost_php_pro — versions 2.5, 2.5.1
N/a — versions n/a

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (Patch, x_refsource_MISC)
cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)