PT-2005-3665 · Cosmoshop · Cosmoshop

L0Om · Publicado 2005-09-02 · Atualizado 2017-07-11 · CVE-2005-2784

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions cosmoshop version 8.10.78

Description The issue allows remote attackers to execute arbitrary SQL commands and bypass authentication.

Recommendations For cosmoshop version 8.10.78, update to a version that fixes the SQL injection vulnerability in the login function.

Correção

Identificadores relacionados

CVE-2005-2784

Produtos afetados

Cosmoshop

Referências · 5

• http://secunia.com/advisories/16625 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2784 · Nota de Segurança
• http://securityfocus.com/bid/14689 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22079 · Nota
• http://marc.info/?l=bugtraq&m=112534390600093&w=2 · Nota