Lucene search
MitreCVE-2005-4572HistoryDec 29, 2005 - 11:03 a.m.
CVE-2005-4572
2005-12-2911:03:00
mitre
web.nvd.nist.gov
21
sql injection
myezshop
shopping cart
security vulnerability
remote attack
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.7
Confidence
Low
EPSS
0.002
Percentile
60.4%
Multiple SQL injection vulnerabilities in myEZshop Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) GroupsId and (2) ItemsId parameters in admin.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected configurations
Node
myezshopmyezshop_shopping_cart
| Vendor | Product | Version | CPE |
|---|---|---|---|
| myezshop | myezshop_shopping_cart | * | cpe:2.3:a:myezshop:myezshop_shopping_cart:*:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.7
Confidence
Low
EPSS
0.002
Percentile
60.4%
Related for CVE-2005-4572