CVE-2004-0323

Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain privileges via the (1) ppp parameter in…

published March 18, 2004

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain privileges via the (1) ppp parameter in viewthread.php, (2) desc parameter in misc.php, (3) tpp parameter in forumdisplay.php, (4) ascdesc parameter in forumdisplay.php, or (5) the addon parameter in stats.php. NOTE: it has also been shown that item (3) is also in XMB 1.9 beta.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04022 · 90.5th percentile
Published
2004-03-18T05:00Z
EPSS history
Timeline
  • 18 MAR 05:00Z
    Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain privileges via the (1) ppp parameter in…
    cvelistv5