high7.5Public exploit code
CVE-2007-3446
BugMall Shopping Cart 2.5 and earlier has a default username "demo" and password "demo," which allows remote attackers to obtain login access.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- bugmall shopping cart 2.5 - SQL Injection / Cross-Site Scripting2007-06-25 · webapps · php · Verified
Impact
BugMall Shopping Cart 2.5 and earlier has a default username "demo" and password "demo," which allows remote attackers to obtain login access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bugmall | Shopping Cart | through 2.5 |
References
- NVD record
- CVE.org record
- http://osvdb.org/40152
- http://www.h4cky0u.org/viewtopic.php?t=26834
- http://www.securityfocus.com/bid/24627
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35040
- https://www.exploit-db.com/exploits/4103
- http://osvdb.org/40152
- http://www.h4cky0u.org/viewtopic.php?t=26834
- http://www.securityfocus.com/bid/24627
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35040
- https://www.exploit-db.com/exploits/4103