3 matches found
ShopWeezle 2.0 memo.php itemID Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17441/info ShopWeezle is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...
CVE-2006-1706: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 itemID parameter to a login.php and b memo.php; and the 2 itemgr, 3 brandID, and 4 album parameters to c index.php. NOTE: this issue also produces resultant full path...
ShopWeezle 2.0 - memo.php?itemID SQL Injection
ShopWeezle 2.0 - memo.php?itemID SQL Injection source: https://www.securityfocus.com/bid/17441/info ShopWeezle is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A...