high7.5Public exploit code
CVE-2005-3004
SQL injection vulnerability in Interakt MX Shop 3.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) idp, (2) id_ctg, or (3) id_prd para…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MX Shop 3.2 - 'index.php' Multiple SQL Injections2005-09-19 · webapps · php · Verified
Impact
SQL injection vulnerability in Interakt MX Shop 3.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) idp, (2) id_ctg, or (3) id_prd parameters to the pages module in index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Interakt | Mx Shop | Version 3.2.0 |
References
- NVD record
- CVE.org record
- http://securitytracker.com/id?1014932
- http://www.osvdb.org/19611
- http://www.securityfocus.com/bid/14876
- http://www.systemsecure.org/ssforum/viewtopic.php?t=250
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22328
- http://securitytracker.com/id?1014932
- http://www.osvdb.org/19611
- http://www.securityfocus.com/bid/14876
- http://www.systemsecure.org/ssforum/viewtopic.php?t=250
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22328