CVE

Id
12693  
CVE No.
CVE-2005-1487  
Status
Candidate  
Description
** DISPUTED ** Multiple SQL injection vulnerabilities in FishCart 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) cartid parameter to upstnt.php or (2) psku parameter to display.php. NOTE: the vendor disputes this report, saying that they are forced SQL errors. The original researcher is known to be unreliable.  
Phase
Assigned (20050511)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
91428 12693 CVE-2005-1487 BUGTRAQ:20050504 Multiple SQL injections and XSS in FishCart 3.1  View
91429 12693 CVE-2005-1487 URL:http://marc.info/?l=bugtraq&m=111530799109755&w=2  View
91430 12693 CVE-2005-1487 BUGTRAQ:20070123 Re: Multiple SQL injections and XSS in FishCart 3.1  View
91431 12693 CVE-2005-1487 URL:http://www.securityfocus.com/archive/1/archive/1/457754/100/200/threaded  View
91432 12693 CVE-2005-1487 MISC:http://www.digitalparadox.org/advisories/fishc.txt  View
91433 12693 CVE-2005-1487 BID:13499  View
91434 12693 CVE-2005-1487 URL:http://www.securityfocus.com/bid/13499  View
91435 12693 CVE-2005-1487 OSVDB:16282  View
91436 12693 CVE-2005-1487 URL:http://www.osvdb.org/16282  View
91437 12693 CVE-2005-1487 OSVDB:16283  View
91438 12693 CVE-2005-1487 URL:http://www.osvdb.org/16283  View
91439 12693 CVE-2005-1487 SECUNIA:15232  View
91440 12693 CVE-2005-1487 URL:http://secunia.com/advisories/15232/  View
91441 12693 CVE-2005-1487 XF:fishcart-multiple-sql-injection(20386)  View

Related JVN