high7.5Public exploit code
CVE-2008-3955
SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ordercod…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Masir Camp E-Shop Module 3.0 - 'ordercode' SQL Injection2008-09-07 · webapps · php · Verified
Impact
SQL injection vulnerability in index.php in Masir Camp E-Shop Module 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ordercode parameter in a veiworderstatus page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Masir Camp | E-Shop Module | through 3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://bugreport.ir/index_52.htm
- http://securityreason.com/securityalert/4234
- http://www.securityfocus.com/bid/31046
- http://www.vupen.com/english/advisories/2008/2509
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44933
- https://www.exploit-db.com/exploits/6395
- http://bugreport.ir/index_52.htm
- http://securityreason.com/securityalert/4234
- http://www.securityfocus.com/bid/31046
- http://www.vupen.com/english/advisories/2008/2509
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44933
- https://www.exploit-db.com/exploits/6395