CVE-2004-2042

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensitive information via (1) content parameter to content.php, (2) content_id parameter to content.php, or (3) list parameter to news.php.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=108588043007224&w=2
http://marc.info/?l=full-disclosure&m=108586723116427&w=2
http://secunia.com/advisories/11740Patch, Vendor Advisory
http://www.osvdb.org/6531Exploit, Patch, Vendor Advisory
http://www.osvdb.org/6532Exploit, Tool Signature, Vendor Advisory
http://www.osvdb.org/6533Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/10436Exploit, Patch, Vendor Advisory
http://www.waraxe.us/index.php?modname=sa&id=31Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16283
http://marc.info/?l=bugtraq&m=108588043007224&w=2
http://marc.info/?l=full-disclosure&m=108586723116427&w=2
http://secunia.com/advisories/11740Patch, Vendor Advisory
http://www.osvdb.org/6531Exploit, Patch, Vendor Advisory
http://www.osvdb.org/6532Exploit, Tool Signature, Vendor Advisory
http://www.osvdb.org/6533Exploit, Patch, Vendor Advisory
http://www.securityfocus.com/bid/10436Exploit, Patch, Vendor Advisory
http://www.waraxe.us/index.php?modname=sa&id=31Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16283

Timeline

Published: May 29, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-20435.0Buffer overflow in ibserver for Firebird Database 1.0 and other versions before 1.5, and possibly other products that use the InterBase code CVE-2004-20447.5PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke CVE-2004-20455.0The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to cause a denial of se CVE-2004-20465.0Unknown vulnerability in APC PowerChute Business Edition 6.0 through 7.0.1 allows remote attackers to cause a denial of service via unknown CVE-2004-20475.0Directory traversal vulnerability in EasyWeb FileManager 1.0 RC-1 for PostNuke allows remote attackers to retrieve arbitrary files via a .. CVE-2004-204810.0radmin in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier starts a process port 25072 that can be accessed with a default "CVE-2004-20494.6eSeSIX Thintune thin clients running firmware 2.4.38 and earlier store sensitive usernames and passwords in cleartext in configuration files CVE-2004-20504.6eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allow local users to gain privileges by pressing CTRL-SHIFT-ALT-DEL and ent CVE-2004-20515.0The Phoenix browser in eSeSIX Thintune thin clients running firmware 2.4.38 and earlier allows local users to read arbitrary files via a fil CVE-2004-20527.5eSeSIX Thintune thin clients running firmware 2.4.38 and earlier accept any password that begins with the actual password, which makes it ea CVE-2004-20537.5PHP remote file inclusion vulnerability in index.php in EasyIns Stadtportal 4 allows remote attackers to execute arbitrary PHP code via the CVE-2004-20545.0CRLF injection vulnerability in PhpBB 2.0.4 and 2.0.9 allows remote attackers to perform HTTP Response Splitting attacks to modify expected