What’s Vulnerable › Vulnerabilities

CVE-2004-0250

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2004-11-23 · updated 2026-06-16

Description

SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter in showproduct.php or (2) the cat parameter in showcat.php.

Affected products

• Photopost Php Pro: 3.1, 3.2, 3.3, 4.0, 4.1, 4.6

References

• http://marc.info/?l=bugtraq&m=107593114909696&w=2
• http://www.securityfocus.com/bid/9557
• http://www.zone-h.org/en/advisories/read/id=3864/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15008
• http://marc.info/?l=bugtraq&m=107593114909696&w=2
• http://www.securityfocus.com/bid/9557
• http://www.zone-h.org/en/advisories/read/id=3864/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15008

Get alerted when CVE-2004-0250 or the next vulnerability affects your stack