high7.5Public exploit code
CVE-2005-4331
SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitrary SQL commands via the (1) step, (2) i…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IHTML Merchant 2.0 - SQL Injection2005-12-16 · webapps · php · Verified
Impact
SQL injection vulnerability in merchant.ihtml in iHTML Merchant Version 2 Pro allows remote attackers to execute arbitrary SQL commands via the (1) step, (2) id, and (3) pid parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ihtml Merchant | Ihtml Merchant | Version 2_pro |
References
- NVD record
- CVE.org record
- http://pridels0.blogspot.com/2005/12/ihtml-merchant-version-2-pro-sql-inj.html
- http://secunia.com/advisories/18089
- http://www.osvdb.org/21808
- http://www.securityfocus.com/bid/15911
- http://www.vupen.com/english/advisories/2005/2967
- http://pridels0.blogspot.com/2005/12/ihtml-merchant-version-2-pro-sql-inj.html
- http://secunia.com/advisories/18089
- http://www.osvdb.org/21808
- http://www.securityfocus.com/bid/15911
- http://www.vupen.com/english/advisories/2005/2967