CVE-2004-0625

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges via the login page.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0893.htmlPatch, Vendor Advisory
http://marc.info/?l=bugtraq&m=108844087931959&w=2
http://www.securityfocus.com/bid/10614Patch, Vendor Advisory
http://www.zone-h.org/en/advisories/read/id=4892/Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16513
http://archives.neohapsis.com/archives/fulldisclosure/2004-06/0893.htmlPatch, Vendor Advisory
http://marc.info/?l=bugtraq&m=108844087931959&w=2
http://www.securityfocus.com/bid/10614Patch, Vendor Advisory
http://www.zone-h.org/en/advisories/read/id=4892/Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16513

Timeline

Published: Dec 6, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-06265.0The tcp_find_option function of the netfilter subsystem in Linux kernel 2.6, when using iptables and TCP options rules, allows remote attack CVE-2004-062710.0The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scr CVE-2004-062810.0Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly CVE-2004-06297.5Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote at CVE-2004-063010.0The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9,CVE-2004-063110.0Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including CVE-2004-06327.5Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to e CVE-2004-06335.0The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer ov CVE-2004-06345.0The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a hand CVE-2004-06355.0The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malforme CVE-2004-063610.0Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote CVE-2004-06376.5Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload pack