phpMyShop 1.0 compte.php SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6746/info phpMyShop, in some cases, does not sufficiently sanitize user-supplied input which is used when constructing SQL queries. As a result, attackers may supply malicious parameters to manipulate the structure and...

CVE-2003-1532

CVE-2003-1532 describes a documented SQL injection in PhpMyShop 1.00, specifically in compte.php where the parameters (1) identifiant and (2) password can be exploited to execute arbitrary SQL commands. The vulnerability, reported as remote command execution potential, implies a breach of confide...

CVE-2003-1532: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in compte.php in PhpMyShop 1.00 allows remote attackers to execute arbitrary SQL commands via the 1 identifiant and 2 password parameters...

phpMyShop (php)

Informations : °°°°°°°°°°°°°° Version : 1.00 Website : http://www.pc-encheres.com Problem : SQL Injection PHP Code/Location : °°°°°°°°°°°°°°°°°°° compte.php : --------------------------------------------------------------- ? sessionstart; if isset$achat sessionregister"achat"; else...