exploitDog

CVE-2004-2161

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands via the link_id parameter.

Ссылки

http://cvs.sourceforge.net/viewcvs.py/tutos/tutos/php/file/file_overview.php?r1=1.11.2.1&r2=1.11.2.2
http://secunia.com/advisories/12606/
Exploit
Patch
Vendor Advisory
http://secunia.com/advisories/18954
http://securitytracker.com/id?1011363
http://www.debian.org/security/2006/dsa-980
http://www.osvdb.org/10164
http://www.securityfocus.com/archive/1/375757
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/11221
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/17444
http://cvs.sourceforge.net/viewcvs.py/tutos/tutos/php/file/file_overview.php?r1=1.11.2.1&r2=1.11.2.2
http://secunia.com/advisories/12606/
Exploit
Patch
Vendor Advisory
http://secunia.com/advisories/18954
http://securitytracker.com/id?1011363
http://www.debian.org/security/2006/dsa-980
http://www.osvdb.org/10164
http://www.securityfocus.com/archive/1/375757
Exploit
Vendor Advisory
http://www.securityfocus.com/bid/11221
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/17444

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tutos:tutos:1.1_2004-04-14:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.03493

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2004-2161

debian

больше 21 года назад

SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows r ...

GHSA-wxvr-hjj2-942j

github

больше 4 лет назад

SQL injection vulnerability in file_overview.php in TUTOS 1.1 allows remote attackers to execute arbitrary SQL commands via the link_id parameter.

EPSS

Процентиль: 88%

0.03493

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other