CVE-2004-2042: SQL Injection
Published May 29, 2004
·Updated
Multiple SQL injection vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary SQL code and gain sensitive information via (1) content parameter to content.php, (2) contentid parameter to content.php, or (3) list parameter to news.php.
Affected Software
2 affected components
e107 e107=0.615a
e107 e107=0.615
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
May 29, 2004
CVE Published
04:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2042?
CVE-2004-2042 has a moderate severity rating due to its potential for SQL injection attacks.
2
How do I fix CVE-2004-2042?
To fix CVE-2004-2042, you should upgrade to a patched version of e107 that addresses the SQL injection vulnerabilities.
3
What software is affected by CVE-2004-2042?
CVE-2004-2042 affects e107 CMS versions 0.615 and 0.615a.
4
What types of attacks can be executed via CVE-2004-2042?
CVE-2004-2042 allows remote attackers to execute arbitrary SQL code, potentially exposing sensitive information.
5
Can CVE-2004-2042 be exploited remotely?
Yes, CVE-2004-2042 can be exploited remotely by attackers targeting specific parameters in the e107 CMS.