PT-2005-3665 · Cosmoshop · Cosmoshop

L0Om · Published 2005-09-02 · Updated 2017-07-11 · CVE-2005-2784

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions cosmoshop version 8.10.78

Description The issue allows remote attackers to execute arbitrary SQL commands and bypass authentication.

Recommendations For cosmoshop version 8.10.78, update to a version that fixes the SQL injection vulnerability in the login function.

Fix

Related Identifiers

CVE-2005-2784

Affected Products

Cosmoshop

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2005-2784 · Security Note
• http://secunia.com/advisories/16625 · Note
• http://securityfocus.com/bid/14689 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22079 · Note
• http://marc.info/?l=bugtraq&m=112534390600093&w=2 · Note