CVE-2004-0455

HIGH 7.2CVE-2004-0455 · Published 06/12/2004 · updated 16/06/2026

In short

CVE-2004-0455 is a HIGH (CVSS 7.2) vulnerability affecting www-sql (www-sql project).
Chance of exploitation in the next 30 days (EPSS): 0.52%, higher than 44.3% of all vulnerabilities.
Fix: update to 0.5.7 or later.

Package	Affected versions	Patched versions
www-sql www-sql_project	`< 0.5.7`	`0.5.7`

Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.