CVE-2004-2567

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in ReciPants 1.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) user id, (2) recipe id, (3) category id, and (4) other ID number fields.

Affected products

Recipants: 1.0, 1.0.1, 1.1, 1.1.1

References

http://secunia.com/advisories/11533
http://securitytracker.com/id?1009984
http://sourceforge.net/project/shownotes.php?group_id=90737&release_id=234415
http://www.securityfocus.com/bid/10250
https://exchange.xforce.ibmcloud.com/vulnerabilities/16024
http://secunia.com/advisories/11533
http://securitytracker.com/id?1009984
http://sourceforge.net/project/shownotes.php?group_id=90737&release_id=234415
http://www.securityfocus.com/bid/10250
https://exchange.xforce.ibmcloud.com/vulnerabilities/16024

Get alerted when CVE-2004-2567 or the next vulnerability affects your stack