VULNERABILITY INTELLIGENCE

CVE-2004-0250

CVSS score10 NONE
EPSS probability3.19%
CISA KEVNot currently listed
Published2004-11-23
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter in showproduct.php or (2) the cat parameter in showcat.php.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references