high7.5Public exploit code
CVE-2005-4081
Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitrary SQL commands vi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Alisveristr E-Commerce Login - Multiple SQL Injections2005-12-03 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitrary SQL commands via the username and password parameters in (1) the user login and (2) administrator login pages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alisveristr | Alisveristr E-Commerce | All versions |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/228
- http://www.osvdb.org/21622
- http://www.securityfocus.com/archive/1/418510/100/0/threaded
- http://www.securityfocus.com/bid/15699/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23507
- http://securityreason.com/securityalert/228
- http://www.osvdb.org/21622
- http://www.securityfocus.com/archive/1/418510/100/0/threaded
- http://www.securityfocus.com/bid/15699/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23507