CVE-2004-2175

ReviewPost PHP Pro - SQL Injection via Product or Category Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2004-2175. PoCs published by G00db0y.

AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in ReviewPost PHP Pro via the 'product' and 'cat' parameters. It lacks executable exploit code but outlines the attack vectors.

Description

Multiple SQL injection vulnerabilities in ReviewPost PHP Pro allow remote attackers to execute arbitrary SQL commands via the (1) product parameter to showproduct.php or (2) cat parameter to showcat.php.

Exploits (2)

exploitdb WRITEUP VERIFIED
by G00db0y · textwebappsphp
https://www.exploit-db.com/exploits/23645

The provided text describes SQL injection vulnerabilities in ReviewPost PHP Pro via the 'product' and 'cat' parameters. It lacks executable exploit code but outlines the attack vectors.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: ReviewPost PHP Pro 2.5.1 and prior
No auth needed
Prerequisites: Access to the vulnerable web application
devstral-2 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by G00db0y · textwebappsphp
https://www.exploit-db.com/exploits/23646

The provided text describes SQL injection vulnerabilities in ReviewPost PHP Pro via the 'product' and 'cat' parameters. It lacks executable exploit code but outlines the attack vectors and potential impact.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: ReviewPost PHP Pro 2.5.1 and prior
No auth needed
Prerequisites: Access to the vulnerable web application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/9574
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/15035
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/10786/
Exploit, Patch mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/352598

Scores

EPSS 0.0124
EPSS Percentile 65.2%

Details

Status published
Products (2)
all_enthusiast_inc/reviewpost_php_pro 2.5
all_enthusiast_inc/reviewpost_php_pro 2.5.1
Published Dec 31, 2004
Tracked Since Feb 18, 2026