CVE

Id
12367  
CVE No.
CVE-2005-1161  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) owAddItem.asp or (2) owProductDetail.asp, (3) idCategory parameter to owListProduct.asp, or (4) bSpecials parameter to owListProduct.asp.  
Phase
Assigned (20050418)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
88805 12367 CVE-2005-1161 BUGTRAQ:20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore  View
88806 12367 CVE-2005-1161 URL:http://marc.info/?l=bugtraq&m=111352017704126&w=2  View
88807 12367 CVE-2005-1161 CONFIRM:http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab  View
88808 12367 CVE-2005-1161 BID:13181  View
88809 12367 CVE-2005-1161 URL:http://www.securityfocus.com/bid/13181  View
88810 12367 CVE-2005-1161 BID:13182  View
88811 12367 CVE-2005-1161 URL:http://www.securityfocus.com/bid/13182  View
88812 12367 CVE-2005-1161 BID:13183  View
88813 12367 CVE-2005-1161 URL:http://www.securityfocus.com/bid/13183  View
88814 12367 CVE-2005-1161 OSVDB:15518  View
88815 12367 CVE-2005-1161 URL:http://www.osvdb.org/15518  View
88816 12367 CVE-2005-1161 OSVDB:15519  View
88817 12367 CVE-2005-1161 URL:http://www.osvdb.org/15519  View
88818 12367 CVE-2005-1161 OSVDB:15520  View
88819 12367 CVE-2005-1161 URL:http://www.osvdb.org/15520  View
88820 12367 CVE-2005-1161 SECTRACK:1013720  View
88821 12367 CVE-2005-1161 URL:http://securitytracker.com/id?1013720  View
88822 12367 CVE-2005-1161 SECUNIA:14969  View
88823 12367 CVE-2005-1161 URL:http://secunia.com/advisories/14969  View
88824 12367 CVE-2005-1161 XF:oneworldstore-product-category-sql-injection(20097)  View

Related JVN