CVE Feed

    Dashboard / CVE / CVE-2004-1553

    CVE-2004-1553

    SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the cat parameter to album.asp. NOTE: it was later reported that vector 1 affects aspWebAlbum 3.2, and the vector involves the txtUserName parameter in a processlogin action to album.asp, as reachable from the login action.

    Published:Dec 31, 2004
    Last Modified:Apr 16, 2026
    EPS:Feb 20, 2005
    EPSS Score:0.04063
    CVSS Score:7.5

    Affected Products

    Vendor
    Fullrevolution
    Product
    Aspwebalbum

    Exploits

    http://www.securityfocus.com/bid/11246http://www.securityfocus.com/bid/30996http://www.securityfocus.com/bid/11246http://www.securityfocus.com/bid/30996https://www.exploit-db.com/exploits/6420https://www.exploit-db.com/exploits/6357

    References

    http://marc.info/?l=bugtraq&m=109604910025090&w=2
    http://osvdb.org/47913
    http://osvdb.org/47914
    http://secunia.com/advisories/31649
    http://www.securityfocus.com/bid/11246
    http://www.securityfocus.com/bid/30996
    https://exchange.xforce.ibmcloud.com/vulnerabilities/17507
    https://exchange.xforce.ibmcloud.com/vulnerabilities/44876
    https://exchange.xforce.ibmcloud.com/vulnerabilities/44877
    https://www.exploit-db.com/exploits/6357
    https://www.exploit-db.com/exploits/6420
    http://marc.info/?l=bugtraq&m=109604910025090&w=2
    http://osvdb.org/47913
    http://osvdb.org/47914
    http://secunia.com/advisories/31649
    http://www.securityfocus.com/bid/11246
    http://www.securityfocus.com/bid/30996
    https://exchange.xforce.ibmcloud.com/vulnerabilities/17507
    https://exchange.xforce.ibmcloud.com/vulnerabilities/44876
    https://exchange.xforce.ibmcloud.com/vulnerabilities/44877
    https://www.exploit-db.com/exploits/6357
    https://www.exploit-db.com/exploits/6420

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High