PT-2005-2409 · Ecomm · Ecomm Professional Guestbook

Published 2005-05-03 · Updated 2008-09-05 · CVE-2005-1412

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Ecomm Professional Guestbook versions 3.x

Description: The issue allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter in the verify.asp file.

Recommendations: For Ecomm Professional Guestbook versions 3.x, avoid using the AdminPWD parameter in the verify.asp file until the issue is resolved. Consider temporarily restricting access to the verify.asp file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-1412

Affected Products

Ecomm Professional Guestbook

References · 4

• 🔥 https://exploit-db.com/exploits/25466 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1412 · Security Note
• http://secunia.com/advisories/15190 · Vendor Advisory
• http://osvdb.org/15967 · Vendor Advisory