high7.5Public exploit code
CVE-2007-3323
SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to execute arbitrary SQL commands via the idPr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Comersus Cart 7.0.7 - 'comersus_optReviewReadExec.asp?id' SQL Injection2007-06-20 · webapps · asp · Verified
Impact
SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to execute arbitrary SQL commands via the idProduct parameter. NOTE: this might be the same as CVE-2005-2190.2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Comersus Open Technologies | Comersus Cart | Version 7.07 |
References
- NVD record
- CVE.org record
- http://osvdb.org/36152
- http://securityreason.com/securityalert/2819
- http://www.securityfocus.com/archive/1/471837/100/0/threaded
- http://www.securityfocus.com/bid/24562
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34953
- http://osvdb.org/36152
- http://securityreason.com/securityalert/2819
- http://www.securityfocus.com/archive/1/471837/100/0/threaded
- http://www.securityfocus.com/bid/24562
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34953