CVE-2004-1553

SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the…

published February 20, 2005

CVSS
—
EPSS
2%
Percentile
83.7
In the wild
Unconfirmed
What it is

SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the cat parameter to album.asp. NOTE: it was later reported that vector 1 affects aspWebAlbum 3.2, and the vector involves the txtUserName parameter in a processlogin action to album.asp, as reachable from the login action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02381 · 83.7th percentile
Published
2005-02-20T05:00Z
EPSS history
Timeline
  • 20 FEB 05:00Z
    SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the…
    cvelistv5