CVE-2005-4035
published 2005-12-06CVE-2005-4035: Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via…
PriorityP339high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
1.33%
67.6th percentile
Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prod, and (2) brid parameters to (a) view.php; the (3) the bid parameter to (b) viewbrands.php; and the (4) grp and (5) cat parameters to index.php.
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Web4Future eCommerce Enterprise Edition 2.1 - 'view.php' Multiple SQL Injections
exploitdb·2005-12-05
CVE-2005-4035 Web4Future eCommerce Enterprise Edition 2.1 - 'view.php' Multiple SQL Injections
Web4Future eCommerce Enterprise Edition 2.1 - 'view.php' Multiple SQL Injections
---
source: https://www.securityfocus.com/bid/15707/info
eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities.
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
eCommerce Enterprise Edition 2.1 and prior and eCommerce Home Edition are vulnerable to these issues.
http://www.example.com/view.php?prod=[SQL]
Exploit-DB
Web4Future eCommerce Enterprise Edition 2.1 - 'index.php' Multiple SQL Injections
exploitdb·2005-12-05
CVE-2005-4035 Web4Future eCommerce Enterprise Edition 2.1 - 'index.php' Multiple SQL Injections
Web4Future eCommerce Enterprise Edition 2.1 - 'index.php' Multiple SQL Injections
---
source: https://www.securityfocus.com/bid/15707/info
eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities.
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
eCommerce Enterprise Edition 2.1 and prior and eCommerce Home Edition are vulnerable to these issues.
http://www.example.com/index.php?action=ViewGroups&grp=[SQL]
http://www.example.com/index.php?action=ViewCategories&cat=[SQL]
Exploit-DB
Web4Future eCommerce Enterprise Edition 2.1 - 'viewbrands.php?bid' SQL Injection
exploitdb·2005-12-05
CVE-2005-4035 Web4Future eCommerce Enterprise Edition 2.1 - 'viewbrands.php?bid' SQL Injection
Web4Future eCommerce Enterprise Edition 2.1 - 'viewbrands.php?bid' SQL Injection
---
source: https://www.securityfocus.com/bid/15707/info
eCommerce Enterprise Edition is prone to multiple SQL injection vulnerabilities.
These vulnerabilities could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.
eCommerce Enterprise Edition 2.1 and prior and eCommerce Home Edition are vulnerable to these issues.
http://www.example.com/viewbrands.php?bid=[SQL]
No writeups or analysis indexed.
http://pridels0.blogspot.com/2005/12/ecommerce-enterprise-edition-sql-inj.htmlhttp://secunia.com/advisories/17881http://www.osvdb.org/21466http://www.osvdb.org/21467http://www.osvdb.org/21468http://www.securityfocus.com/bid/15707http://www.vupen.com/english/advisories/2005/2744http://pridels0.blogspot.com/2005/12/ecommerce-enterprise-edition-sql-inj.htmlhttp://secunia.com/advisories/17881http://www.osvdb.org/21466http://www.osvdb.org/21467http://www.osvdb.org/21468http://www.securityfocus.com/bid/15707http://www.vupen.com/english/advisories/2005/2744
2005-12-06
Published