CVE-2005-4035 Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prod, and (2) brid parameters to....
HighCVSS 7.5
EPSS 1.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prod, and (2) brid parameters to (a) view.php; the (3) the bid parameter to (b) viewbrands.php; and the (4) grp and (5) cat parameters to index.php.
Affected products
No affected product data has been published yet.
References
- pridels0.blogspot.com
- 17881 third-party-advisory
- 21466 vdb-entry
- 21467 vdb-entry
- 21468 vdb-entry
- 15707 exploit vdb-entry
- ADV-2005-2744 vdb-entry