Back

CVE-2004-0625

SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges via the login page.

Published: Dec 6, 2004 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
websoft infinity_web 1.0

GitHub Security Advisory GHSA-mggc-5qcw-3q96

SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.28%

Top 32% most likely to be exploited

Threat Score 30.4 / 100

Data Sources

NVD EPSS GitHub