CVE-2004-0374

Опубликовано: 04 мая 2004

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "SQLUSER" string.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:interchange_development_group:interchange:4.8.1:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:4.8.2:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:4.8.3:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:4.8.4:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:4.8.5:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:4.8.6:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:4.8.7:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:4.8.8:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:4.8.9:*:*:*:*:*:*:*

cpe:2.3:a:interchange_development_group:interchange:5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 85%

0.02825

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-0374

debian

около 22 лет назад

Interchange before 5.0.1 allows remote attackers to "expose the conten ...

GHSA-v6q8-f3pg-p46q

github

больше 4 лет назад

Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "__SQLUSER__" string.