high7.5Public exploit code
CVE-2005-0935
Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the (1) idpages parameter to page…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ESMI PayPal StoreFront 1.7 - 'products1.php?id2' SQL Injection2005-03-26 · webapps · php · Verified
- ESMI PayPal StoreFront 1.7 - 'pages.php?idpages' SQL Injection2005-03-26 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the (1) idpages parameter to pages.php or the (2) id2 parameter to products1.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Esmi | Paypal Storefront | Version 1.7 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=111221890614271&w=2
- http://secunia.com/advisories/14711
- http://securitytracker.com/id?1013563
- http://www.hackerscenter.com/Archive/view.asp?id=1774
- http://www.osvdb.org/15057
- http://www.osvdb.org/15058
- http://www.securityfocus.com/bid/12903
- http://marc.info/?l=bugtraq&m=111221890614271&w=2
- http://secunia.com/advisories/14711
- http://securitytracker.com/id?1013563
- http://www.hackerscenter.com/Archive/view.asp?id=1774
- http://www.osvdb.org/15057
- http://www.osvdb.org/15058
- http://www.securityfocus.com/bid/12903