high7.5
CVE-2005-3917
SQL injection vulnerability in usersession in CommodityRentals 2.0 Online Rental Business Creator script allows remote attackers to execute arbitrary SQL comma…
Impact
SQL injection vulnerability in usersession in CommodityRentals 2.0 Online Rental Business Creator script allows remote attackers to execute arbitrary SQL commands via the user_id parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Commodityrentals | Commodityrentals | Version 2.0 |
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2005/11/commodity-rentals-2x-userid-sql-inj.html
- http://secunia.com/advisories/17665
- http://www.osvdb.org/21055
- http://www.vupen.com/english/advisories/2005/2547
- http://pridels0.blogspot.com/2005/11/commodity-rentals-2x-userid-sql-inj.html
- http://secunia.com/advisories/17665
- http://www.osvdb.org/21055
- http://www.vupen.com/english/advisories/2005/2547