PT-2005-3357 · Unknown · Productcart

Zinho · Publicado 2005-08-03 · Atualizado 2017-07-11 · CVE-2005-2445

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Product Cart version 2.6

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the idcategory parameter in the "viewPrd.asp" file.

Recommendations For version 2.6, avoid using the idcategory parameter in the vulnerable "viewPrd.asp" file until the issue is resolved. As a temporary workaround, consider restricting access to the "viewPrd.asp" file to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-2445

Produtos afetados

Productcart

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2005-2445 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/21672 · Nota
• http://osvdb.org/17329 · Nota
• http://osvdb.org/18508 · Nota
• http://securityfocus.com/bid/13881 · Nota
• http://marc.info/?l=bugtraq&m=112274710020521&w=2 · Nota
• http://securitytracker.com/id?1014129 · Nota
• http://secunia.com/advisories/14833 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20956 · Nota