high7.5
CVE-2005-4404
SQL injection vulnerability in default.asp in Media2 CMS Shop 18.x allows remote attackers to execute arbitrary SQL commands via the item parameter.
Impact
SQL injection vulnerability in default.asp in Media2 CMS Shop 18.x allows remote attackers to execute arbitrary SQL commands via the item parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Media2 Cms | Media2 Cms Shop | through 18.2 |