Back
CVE-2004-2212
SQL injection vulnerability in forum.asp in AliveSites Forums 2.0 allows remote attackers to execute arbitrary SQL commands via the forum_id parameter.
Published: Dec 31, 2004
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| alivesites | alivesites_forum | 2.0 |
GitHub Security Advisory GHSA-rrj7-vm9h-37rx
SQL injection vulnerability in forum.asp in AliveSites Forums 2.0 allows remote attackers to...
References (12)
- http://secunia.com/advisories/12844 Vendor Advisory
- http://www.maxpatrol.com/advdetails.asp?id=5 Exploit, Vendor Advisory
- http://www.maxpatrol.com/mp_advisory.asp
- http://www.osvdb.org/10776
- http://www.securityfocus.com/bid/11427
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17730
- http://secunia.com/advisories/12844 Vendor Advisory
- http://www.maxpatrol.com/advdetails.asp?id=5 Exploit, Vendor Advisory
- http://www.maxpatrol.com/mp_advisory.asp
- http://www.osvdb.org/10776
- http://www.securityfocus.com/bid/11427
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17730
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
1.47%
Top 29% most likely to be exploited
Threat Score
30.4 / 100
Data Sources
NVD
EPSS
GitHub