CVE-2008-1907

2008-04-2123:00:00

mitre

www.cve.org

8.3 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.0%

JSON

Multiple SQL injection vulnerabilities in functions/display_page.func.php in cpCommerce 1.1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id_product, (2) id_manufacturer, and (3) id_category parameters to unspecified components. NOTE: this probably overlaps CVE-2007-2959 and CVE-2007-2890.

References

bugreport.ir/index.php?/34

secunia.com/advisories/29807

www.securityfocus.com/bid/28755

exchange.xforce.ibmcloud.com/vulnerabilities/41781

www.exploit-db.com/exploits/5437