PT-2005-2499 · Midicart · Midicart Php Shopping Cart

Exoduks · Publicado 2005-05-11 · Atualizado 2017-07-11 · CVE-2005-1503

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MidiCart PHP Shopping Cart (affected versions not specified)

Description The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities allow remote attackers to execute arbitrary SQL commands. The vulnerable parameters include the searchstring parameter to "search list.php", the maingroup or secondgroup parameters to "item list.php", and the code no parameter to "item show.php".

Recommendations For MidiCart PHP Shopping Cart, consider restricting access to the "search list.php", "item list.php", and "item show.php" scripts until a fix is available. As a temporary workaround, avoid using the searchstring, maingroup, secondgroup, and code no parameters in their respective scripts until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-1503

Produtos afetados

Midicart Php Shopping Cart

Referências · 13

• 🔥 https://exploit-db.com/exploits/25614 · Exploit
• 🔥 http://securityfocus.com/bid/13514 · Exploit
• 🔥 http://securityfocus.com/bid/13513 · Exploit
• 🔥 http://securityfocus.com/bid/13515 · Exploit
• 🔥 http://securityfocus.com/bid/13512 · Exploit
• 🔥 http://hackgen.org/advisories/hackgen-2005-004.txt · Exploit
• http://osvdb.org/16177 · Nota
• http://marc.info/?l=bugtraq&m=111533057918993&w=2 · Nota
• http://secunia.com/advisories/15269 · Nota
• http://osvdb.org/16176 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20428 · Nota
• http://osvdb.org/16175 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1503 · Nota de Segurança