CVE-2005-1503 in MidiCart PHP Shopping Cart

Riassunto

di MITRE

Multiple SQL injection vulnerabilities in MidiCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) searchstring parameter to search_list.php, the (2) maingroup or (3) secondgroup parameters to item_list.php, or (4) code_no parameter to item_show.php.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 11/05/2005
• Divulgazione: 11/05/2005
• Moderazione: accettato
• Voce: VDB-25131
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.5 (NVD)
• EPSS: 0.04103
• KEV: no
• Attività: molto basso
• Settore: Telecommunication, Insurance, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-1503
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-1503
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-1503/