CVE

Id
10233  
CVE No.
CVE-2004-1806  
Status
Candidate  
Description
SQL injection vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to execute SQL commands via the (1) category_id, (2) product_id, or (3) feature_id parameters.  
Phase
Assigned (20050504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
70411 10233 CVE-2004-1806 BUGTRAQ:20040312 Dogpatch Software CFWebstore 5.0 shopping cart software multiple security vulnerabilities  View
70412 10233 CVE-2004-1806 URL:http://marc.info/?l=bugtraq&m=107911090901744&w=2  View
70413 10233 CVE-2004-1806 MISC:http://www.s-quadra.com/advisories/Adv-20040312.txt  View
70414 10233 CVE-2004-1806 CONFIRM:http://www.cfwebstore.com/whatsnewdetail.cfm?WhatsNew__WhatsNewID=43  View
70415 10233 CVE-2004-1806 BID:9854  View
70416 10233 CVE-2004-1806 URL:http://www.securityfocus.com/bid/9854  View
70417 10233 CVE-2004-1806 OSVDB:4229  View
70418 10233 CVE-2004-1806 URL:http://www.osvdb.org/4229  View
70419 10233 CVE-2004-1806 SECTRACK:1009403  View
70420 10233 CVE-2004-1806 URL:http://securitytracker.com/id?1009403  View
70421 10233 CVE-2004-1806 SECUNIA:11112  View
70422 10233 CVE-2004-1806 URL:http://secunia.com/advisories/11112  View
70423 10233 CVE-2004-1806 XF:cfwebstore-index-sql-injection(15447)  View

Related JVN