CVE-2005-4429

2005-12-2100:00:00

mitre

www.cve.org

8.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.0%

JSON

SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) sort_by and (2) sort_order parameters to index.php.

References

attrition.org/pipermail/vim/2006-January/000450.html

pridels0.blogspot.com/2005/11/cs-cart-sql-inj-vuln.html

www.osvdb.org/21370

www.securityfocus.com/bid/16134