Lucene search
HistoryMay 10, 2005 - 4:00 a.m.
CVE-2004-1881
cve-2004-1881
sql injection
cactushop 5.x
security vulnerability
nvd
8.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.4%
SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows remote attackers to execute arbitrary SQL commands via the strItems parameter.
Affected configurations
Node
cactusoftcactushopMatch5.0
ORcactusoftcactushopMatch5.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| cactusoft:cactushop | cactusoft cactushop | eq | 5.0 |
| cactusoft:cactushop | cactusoft cactushop | eq | 5.1 |
Related
cvelist
cvelist
CVE-2004-1881
2005-05-10 04:00:00
nvd
nvd
CVE-2004-1881
2004-12-31 05:00:00
openvas
openvas
CactuShop XSS and SQL injection flaws
2005-11-03 00:00:00
CactuShop XSS and SQL injection flaws
2005-11-03 00:00:00
nessus
nessus
CactuShop 5.x Multiple Remote Vulnerabilities (XSS, SQLi)
2004-10-12 00:00:00
8.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.4%
Related for CVE-2004-1881