VulnerabilityModified
CVE-2004-2746
SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
HIGH 7.5EPSS 2.96%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.96%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 2.96% probability · 86th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-89
- Affected
- pensacola web designs/xtremeasp photogallery
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/10659Vendor Advisory
- http://securityreason.com/securityalert/3346
- http://securitytracker.com/id?1008745
- http://www.osvdb.org/3585
- http://www.pensacolawebdesigns.com/xtremeasp/readmore.aspPatch
- http://www.securityfocus.com/archive/1/350028/30/21640/threaded
- http://www.securityfocus.com/bid/9438
- http://www.tripbit.org/advisories/TA-150104.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14860
- http://secunia.com/advisories/10659Vendor Advisory
- http://securityreason.com/securityalert/3346
- http://securitytracker.com/id?1008745
- http://www.osvdb.org/3585
- http://www.pensacolawebdesigns.com/xtremeasp/readmore.aspPatch
- http://www.securityfocus.com/archive/1/350028/30/21640/threaded
- http://www.securityfocus.com/bid/9438
- http://www.tripbit.org/advisories/TA-150104.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14860
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.