CVE-2004-0374

Опубликовано: 04 мая 2004

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "SQLUSER" string.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:interchange_development_group:interchange:4.8.1:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:4.8.2:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:4.8.3:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:4.8.4:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:4.8.5:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:4.8.6:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:4.8.7:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:4.8.8:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:4.8.9:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.08308

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-0374

debian

почти 22 года назад

Interchange before 5.0.1 allows remote attackers to "expose the conten ...

GHSA-v6q8-f3pg-p46q

github

почти 4 года назад

Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "__SQLUSER__" string.