CVE-2005-4035

Description

Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prod, and (2) brid parameters to (a) view.php; the (3) the bid parameter to (b) viewbrands.php; and the (4) grp and (5) cat parameters to index.php.

References

http://www.vupen.com/english/advisories/2005/2744

http://www.osvdb.org/21468

http://www.osvdb.org/21467

http://www.osvdb.org/21466

http://secunia.com/advisories/17881

http://pridels0.blogspot.com/2005/12/ecommerce-enterprise-edition-sql-inj.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS