CVE-2005-4404

SQL injection vulnerability in default.asp in Media2 CMS Shop 18.x allows remote attackers to execute arbitrary SQL commands via the item parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources...

CVE-2005-4404

The CVE-2005-4404 entry describes an SQL injection vulnerability in default.asp for Media2 CMS Shop 18.x. The vulnerability is exploitable via the item parameter, allowing remote attackers to execute arbitrary SQL commands. The root cause described across sources is unsafe handling/concatenation ...

CVE-2005-4404

SQL injection vulnerability in default.asp in Media2 CMS Shop 18.x allows remote attackers to execute arbitrary SQL commands via the item parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources...