CVE-2005-2784

Description

SQL injection vulnerability in the login function for the administration login panel in cosmoshop 8.10.78 allows remote attackers to execute arbitrary SQL commands and bypass authentication via unspecified vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/22079

http://www.securityfocus.com/bid/14689

http://secunia.com/advisories/16625/

http://marc.info/?l=bugtraq&m=112534390600093&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS