Unscored severity · published Dec 31, 2004
CVE-2004-2209
SQL injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors
–
CVSS
1.2%
EPSS
No
On KEV
Description
SQL injection vulnerability in Ideal Science IdealBB 1.4.9 through 1.5.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ID
Idealbb · Ideal Science
1.4.9; 1.4.9_beta; 1.4.9a; 1.5.1; 1.5.2; 1.5.2a; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2209
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2209
Vendor Advisory
http://www.maxpatrol.com/advdetails.asp?id=14
www.maxpatrol.com
http://www.maxpatrol.com/mp_advisory.asp
www.securityfocus.com
http://www.securityfocus.com/bid/11424
More from Idealbb
–
CVE-2006-2321
Multiple cross-site scripting (XSS) vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to inject arbitrary web script or HTML via unknown vectors
–
CVE-2006-2318
Incomplete blacklist vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to upload and execute an ASP script via a ".asa" file, which bypasses the…
–
CVE-2006-2319
Ideal Science Ideal BB 1.5.4a and earlier does not properly check file extensions before permitting an upload, which allows remote attackers to upload and execute an ASP script…
–
CVE-2006-2320
Multiple SQL injection vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors…
–
CVE-2006-2317
Unspecified vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to read arbitrary files under the web root via unspecified attack vectors related to…