CVE-2008-2339 SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action, a different....
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action, a different vector than CVE-2008-2038, CVE-2007-4597, and CVE-2007-2549.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| turnkeywebtools sunshop shopping cart | = 3.5.1 | No fix listed |
References
- 30282 third-party-advisory vendor-advisory
- 3894 third-party-advisory
- 20080515 SunShop Version 3.5.1 Remote Blind Sql Injection mailing-list
- 29241 exploit vdb-entry
- sunshop-id-sql-injection(42467) vdb-entry