medium6.8Public exploit code
CVE-2007-3447
SQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the "basic search box." NOTE…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- bugmall shopping cart 2.5 - SQL Injection / Cross-Site Scripting2007-06-25 · webapps · php · Verified
Impact
SQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the "basic search box." NOTE: 4.0.2 and other versions might also be affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bugmall | Shopping Cart | All versions Version 2.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/38223
- http://secunia.com/advisories/25836
- http://www.h4cky0u.org/viewtopic.php?t=26834
- http://www.securityfocus.com/bid/24629
- http://www.vupen.com/english/advisories/2007/2322
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35039
- https://www.exploit-db.com/exploits/4103
- http://osvdb.org/38223
- http://secunia.com/advisories/25836
- http://www.h4cky0u.org/viewtopic.php?t=26834
- http://www.securityfocus.com/bid/24629
- http://www.vupen.com/english/advisories/2007/2322
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35039
- https://www.exploit-db.com/exploits/4103