CVE-2004-1835: SQL Injection
Published Dec 31, 2004
·Updated
Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrary SQL via the (1) img, (2) cat, (3) sortkey, (4) orderkey, (5) user, or (6) album parameters.
Affected Software
1 affected component
Invision Power Services Invision Gallery=1.0.1
Event History
Dec 31, 2004
CVE Published
05:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1835?
CVE-2004-1835 has been assigned a medium severity level due to its potential for exploitation via SQL injection.
2
How do I fix CVE-2004-1835?
To fix CVE-2004-1835, upgrade Invision Gallery to the latest version that addresses the SQL injection vulnerabilities.
3
What software is affected by CVE-2004-1835?
CVE-2004-1835 affects Invision Gallery version 1.0.1.
4
What types of attacks are possible with CVE-2004-1835?
CVE-2004-1835 allows attackers to execute arbitrary SQL commands through multiple user input parameters.
5
Can CVE-2004-1835 lead to data breaches?
Yes, CVE-2004-1835 can lead to data breaches as it allows unauthorized access to the database.