exploitDog

CVE-2004-2266

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in Ansel 2.1 and earlier allows remote attackers to modify SQL statements via the image parameter.

Ссылки

http://secunia.com/advisories/12856
Patch
Vendor Advisory
http://secunia.com/secunia_research/2004-17/advisory/
Patch
Vendor Advisory
http://securitytracker.com/id?1012434
Patch
http://www.osvdb.org/12236
Patch
http://www.securityfocus.com/bid/11824
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18373
http://secunia.com/advisories/12856
Patch
Vendor Advisory
http://secunia.com/secunia_research/2004-17/advisory/
Patch
Vendor Advisory
http://securitytracker.com/id?1012434
Patch
http://www.osvdb.org/12236
Patch
http://www.securityfocus.com/bid/11824
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/18373

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ansel:ansel:1.0:*:*:*:*:*:*:*

cpe:2.3:a:ansel:ansel:1.1:*:*:*:*:*:*:*

cpe:2.3:a:ansel:ansel:1.2:*:*:*:*:*:*:*

cpe:2.3:a:ansel:ansel:1.3:*:*:*:*:*:*:*

cpe:2.3:a:ansel:ansel:1.4:*:*:*:*:*:*:*

cpe:2.3:a:ansel:ansel:2.0:*:*:*:*:*:*:*

cpe:2.3:a:ansel:ansel:2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.00816

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-r5px-246v-9fm3

github

почти 4 года назад

SQL injection vulnerability in Ansel 2.1 and earlier allows remote attackers to modify SQL statements via the image parameter.

EPSS

Процентиль: 74%

0.00816

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other