{"id":"CVE-2005-0271","aliases":["EUVD-2005-0272","GHSA-v67f-866f-jrfg"],"status":"published","title":"Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers...","description":"Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showcat.php or (2) product parameter to addfav.php.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01229,"percentile":0.69078,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2005-01-03T05:00:00Z","modified":"2026-06-16T22:10:49Z","exploits":[{"source":"exploitdb","id":"EDB-43821","title":"ReviewPost \u003c 2.84 - Multiple Vulnerabilities","type":"webapps","platform":"php","date":"2015-01-02","url":"https://www.exploit-db.com/exploits/43821"}],"products":[{"vendor":"photopost","product":"reviewpost_php_pro"}],"references":[{"url":"http://www.gulftech.org/?node=research\u0026article_id=00062-01022005","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/18732","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/13697/","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Exploit","Patch","Vendor Advisory"]},{"url":"http://marc.info/?l=bugtraq\u0026m=110485682424110\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0271"},{"url":"http://secunia.com/advisories/13697"},{"url":"https://github.com/advisories/GHSA-v67f-866f-jrfg"}],"sources":{"cve":[{"id":"CVE-2005-0271","description":"Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showcat.php or (2) product parameter to addfav.php.","status":"published","published":"2005-02-10T05:00:00Z","modified":"2024-08-07T21:05:25.416Z","updated_at":"2026-11-02T14:33:40.245652Z"}],"euvd":[{"id":"EUVD-2005-0272","description":"Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showcat.php or (2) product parameter to addfav.php.","status":"published","published":"2005-02-10T05:00:00Z","modified":"2024-08-07T21:05:25Z","updated_at":"2026-11-03T01:15:39.244683Z"}],"ghsa":[{"id":"GHSA-v67f-866f-jrfg","title":"Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers...","description":"Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showcat.php or (2) product parameter to addfav.php.","status":"published","published":"2022-05-01T01:48:04Z","modified":"2025-04-03T04:07:13Z","updated_at":"2026-11-02T15:00:40.646262Z"}],"nvd":[{"id":"CVE-2005-0271","description":"Multiple SQL injection vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to showcat.php or (2) product parameter to addfav.php.","status":"published","published":"2005-01-03T05:00:00Z","modified":"2026-06-16T22:10:49.073Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:54.594271Z"}]}}