← Database

CVE-2004-2746

HIGH CVSS: 7.5 Published: 2004-12-31 Modified: 2026-06-16

Description

SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.

Affected Platforms

Pensacola Web Designs Xtremeasp Photogallery

Weakness Type

CWE-89

References