AFFCommerce Shopping Cart 1.1.4 - 'ItemInfo.php?item_id' SQL Injection
| EKU-ID: 31873 | CVE: CVE-2005-3914;OSVDB-21071 | OSVDB-ID: |
| Author: r0t3d3Vil | Published: 2005-11-23 | Verified:
 |
| Download: | ||
Rating☆☆☆☆☆ |
| EKU-ID: 31873 | CVE: CVE-2005-3914;OSVDB-21071 | OSVDB-ID: |
| Author: r0t3d3Vil | Published: 2005-11-23 | Verified:
|
| Download: | ||
Rating☆☆☆☆☆ |
source: https://www.securityfocus.com/bid/15545/info AFFCommerce Shopping Cart is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. AFFCommerce Shopping Cart 1.1.4 is reportedly affected. It is possible that other versions are vulnerable as well. http://www.example.com/standalone/ItemInfo.php?item_id=[sql]