Sql injection

2008-04-2204:41:00

PRIOn knowledge base

www.prio-n.com

8.9 High

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.0%

JSON

Multiple SQL injection vulnerabilities in functions/display_page.func.php in cpCommerce 1.1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id_product, (2) id_manufacturer, and (3) id_category parameters to unspecified components. NOTE: this probably overlaps CVE-2007-2959 and CVE-2007-2890.

CPENameOperatorVersion
cpcommerceeq1.1.0

CPE	Name	Operator	Version
	cpcommerce	eq	1.1.0

References

bugreport.ir/index.php?/34

secunia.com/advisories/29807

www.securityfocus.com/bid/28755

exchange.xforce.ibmcloud.com/vulnerabilities/41781

www.exploit-db.com/exploits/5437