CVE-2005-3937

Опубликовано: 01 дек. 2005

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php.

Ссылки

http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html
Broken Link
http://secunia.com/advisories/17808
Third Party Advisory
http://www.osvdb.org/21252
Broken Link
http://www.osvdb.org/21253
Broken Link
http://www.osvdb.org/21254
Broken Link
http://www.osvdb.org/21255
Broken Link
http://www.securityfocus.com/bid/15652
Broken Link
http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html
Broken Link
http://secunia.com/advisories/17808
Third Party Advisory
http://www.osvdb.org/21252
Broken Link
http://www.osvdb.org/21253
Broken Link
http://www.osvdb.org/21254
Broken Link
http://www.osvdb.org/21255
Broken Link
http://www.securityfocus.com/bid/15652
Broken Link

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:softbizscripts:b2b_trading_marketplace_script:*:*:*:*:*:*:*:*

Версия до 1.1 (включая)

EPSS

Процентиль: 69%

0.01348

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-68m4-gw7r-wgrq

github

больше 4 лет назад