CVE-2008-0546 Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL commands via the (1) idProduct and (2) options parameter...
HighCVSS 7.5
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL commands via the (1) idProduct and (2) options parameters to (a) ajax/ajax_optInventory.asp, or the (2) recid parameter to (b) ajax/ajax_getBrands.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| shoppingtree candypress store | = 4.1 | No fix listed |
| shoppingtree candypress store | = 4.1.1.26 | No fix listed |
References
- 28662 third-party-advisory vendor-advisory
- 3600 third-party-advisory
- www.candypress.com exploit
- 20080125 [CandyPress] eCommerce suite (SQL Injection + XSS + Path Disclosure) mailing-list
- 27454 exploit vdb-entry
- ADV-2008-0314 vdb-entry
- ecommercesuite-ajaxgetbrands-sql-injection(39939) vdb-entry
- 4988 exploit