Lucene search
HistoryAug 11, 2008 - 11:41 p.m.
CVE-2008-3585
cve-2008-3585
sql injection
pozscripts greencart
php shopping cart
remote attackers
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
28.0%
Multiple SQL injection vulnerabilities in PozScripts GreenCart PHP Shopping Cart allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) product_desc.php and (2) store_info.php.
Affected configurations
Node
pozscriptsgreencart_php_shopping_cart
| CPE | Name | Operator | Version |
|---|---|---|---|
| pozscripts:greencart_php_shopping_cart | pozscripts greencart php shopping cart | eq | * |
Related
cvelist
cvelist
CVE-2008-3585
2008-08-11 23:00:00
prion
prion
Sql injection
2008-08-11 23:41:00
nvd
nvd
CVE-2008-3585
2008-08-11 23:41:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
28.0%
Related for CVE-2008-3585