Unrated severityNVD Advisory· Published Dec 31, 2004· Updated Jun 16, 2026
CVE-2004-2322
CVE-2004-2322
Description
SQL injection vulnerability in the (1) announce and (2) notes modules of phpWebSite before 0.9.3-2 allows remote attackers to execute arbitrary SQL queries, as demonstrated using the ANN_id parameter to the announce module.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:phpwebsite:phpwebsite:0.9.0:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:phpwebsite:phpwebsite:0.9.0:*:*:*:*:*:*:*
- cpe:2.3:a:phpwebsite:phpwebsite:0.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:phpwebsite:phpwebsite:0.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:phpwebsite:phpwebsite:0.9.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:phpwebsite:phpwebsite:0.9.3:*:*:*:*:*:*:*
- cpe:2.3:a:phpwebsite:phpwebsite:0.9.3.1:*:*:*:*:*:*:*
- (no CPE)range: <0.9.3-2
Patches
Vulnerability mechanics
References
7- www.securitytracker.com/alerts/2004/Feb/1009045.htmlnvdExploit
- www.systemsecure.org/advisories/ssadvisory13022004.phpnvdExploitVendor Advisory
- www.zone-h.com/advisories/read/id=3955nvdExploitVendor Advisory
- secunia.com/advisories/10878/nvdVendor Advisory
- sourceforge.net/tracker/index.phpnvd
- www.osvdb.org/3852nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/15219nvd
News mentions
0No linked articles in our index yet.