PT-2004-2849 · Unknown · Advanced Guestbook

Published 2004-04-23 · Updated 2017-07-11 · CVE-2004-1952

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Advanced Guestbook version 2.2

Description The issue allows remote attackers to execute arbitrary SQL commands and gain privileges via the password.

Recommendations For Advanced Guestbook version 2.2, update to a version that fixes the SQL injection issue to prevent remote attackers from executing arbitrary SQL commands.

Exploit

Fix

Related Identifiers

CVE-2004-1952

Affected Products

Advanced Guestbook

References · 7

• 🔥 http://securityfocus.com/bid/10209 · Exploit
• 🔥 https://exploit-db.com/exploits/24050 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1952 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2005-02/0138.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15892 · Note
• http://marc.info/?l=bugtraq&m=108258046402890&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1952 · Note