CVE-2004-1806 SQL injection vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to execute SQL commands via the (1) category_id, (2) product_id, or (3) feature_id parameters.
HighCVSS 7.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to execute SQL commands via the (1) category_id, (2) product_id, or (3) feature_id parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dogpatch software cfwebstore | = 5.0 | No fix listed |
References
- 20040312 Dogpatch Software CFWebstore 5.0 shopping cart software multiple security vulnerabilities mailing-list
- 11112 patch third-party-advisory
- 1009403 vdb-entry
- www.cfwebstore.com
- 4229 vdb-entry
- www.s-quadra.com vendor-advisory
- 9854 vdb-entry
- cfwebstore-index-sql-injection(15447) vdb-entry