CVE

Id
13028  
CVE No.
CVE-2005-1822  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) printable parameter to home.php, (3) productid or (4) mode parameter to product.php, (5) id parameter to error_message.php, (6) section parameter to help.php, (7) mode parameter to orders.php, (8) mode parameter to register.php, (9) mode parameter to search.php, or the (10) gcid or (11) gcindex parameter to giftcert.php.  
Phase
Assigned (20050601)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
93827 13028 CVE-2005-1822 BUGTRAQ:20050530 Multiple vulnerabilities in x-cart Gold  View
93828 13028 CVE-2005-1822 URL:http://marc.info/?l=bugtraq&m=111748583101076&w=2  View
93829 13028 CVE-2005-1822 BID:13817  View
93830 13028 CVE-2005-1822 URL:http://www.securityfocus.com/bid/13817  View
93831 13028 CVE-2005-1822 SECTRACK:1014077  View
93832 13028 CVE-2005-1822 URL:http://securitytracker.com/id?1014077  View
93833 13028 CVE-2005-1822 SECUNIA:15555  View
93834 13028 CVE-2005-1822 URL:http://secunia.com/advisories/15555  View
93835 13028 CVE-2005-1822 XF:xcart-multiple-parameters-sql-injection(20773)  View

Related JVN