phpMyShop 1.0 compte.php SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6746/info phpMyShop, in some cases, does not sufficiently sanitize user-supplied input which is used when constructing SQL queries. As a result, attackers may supply malicious parameters to manipulate the structure and...

CVE-2003-1532

CVE-2003-1532 describes a documented SQL injection in PhpMyShop 1.00, specifically in compte.php where the parameters (1) identifiant and (2) password can be exploited to execute arbitrary SQL commands. The vulnerability, reported as remote command execution potential, implies a breach of confide...

phpMyShop (php)

Informations : °°°°°°°°°°°°°° Version : 1.00 Website : http://www.pc-encheres.com Problem : SQL Injection PHP Code/Location : °°°°°°°°°°°°°°°°°°° compte.php : --------------------------------------------------------------- ? sessionstart; if isset$achat sessionregister"achat"; else...