CVE-2004-1553

CVE-2004-1553 describes a SQL injection vulnerability in fullrevolution aspWebAlbum, specifically version 3.2. Attackers can exploit this by injecting malicious SQL statements through the username field on the login page (via the txtUserName parameter to album.asp) or the 'cat' parameter in album.asp. This vulnerability carries a high CVSS score of 7.5, indicating that it is easily exploitable remotely without authentication, potentially leading to compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or Hot List, exploit code is publicly available on ExploitDB, though there is no evidence of widespread active exploitation or significant community discussion.