CVE-2005-4614 Multiple SQL injection vulnerabilities in digiSHOP 3.1.17 and earlier allow remote attackers to execute arbitrary SQL commands or obtain the full installation path via (1) the c parameter in cart.php....
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in digiSHOP 3.1.17 and earlier allow remote attackers to execute arbitrary SQL commands or obtain the full installation path via (1) the c parameter in cart.php and (2) unspecified search module parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sum effect software digishop | <= 3.1.17 | No fix listed |
References
- pridels0.blogspot.com
- 21302 exploit vdb-entry
- 21303 vdb-entry
- ADV-2005-2563 vdb-entry
- digishop-search-sql-injection(23357) vdb-entry
- digishop-errors-disclose-path(23358) vdb-entry