CVE

Id
15881  
CVE No.
CVE-2005-4677  
Status
Candidate  
Description
SQL injection vulnerability in additional_images.php (aka the Additional Images module) before 1.14 in osCommerce allows remote attackers to execute arbitrary SQL commands via the products_id parameter to product_info.php.  
Phase
Assigned (20060131)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
124850 15881 CVE-2005-4677 FULLDISC:20051006 OScommerce: "Additional Images" Module SQL Injection  View
124851 15881 CVE-2005-4677 URL:http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0124.html  View
124852 15881 CVE-2005-4677 MISC:http://www.oscommerce.com/community/contributions,1032  View
124853 15881 CVE-2005-4677 BID:15023  View
124854 15881 CVE-2005-4677 URL:http://www.securityfocus.com/bid/15023  View
124855 15881 CVE-2005-4677 VUPEN:ADV-2005-1974  View
124856 15881 CVE-2005-4677 URL:http://www.vupen.com/english/advisories/2005/1974  View
124857 15881 CVE-2005-4677 OSVDB:19874  View
124858 15881 CVE-2005-4677 URL:http://www.osvdb.org/19874  View
124859 15881 CVE-2005-4677 SECUNIA:17082  View
124860 15881 CVE-2005-4677 URL:http://secunia.com/advisories/17082  View
124861 15881 CVE-2005-4677 XF:oscommerce-productinfo-sql-injection(22528)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62463 JVNDB-2005-000665 Microsoft Internet Explorer におけるステータスバーの URL を偽装される脆弱性 Microsoft Internet Explorer には、form タグ、a タグ、input タグを組み合わせることで、本来のリンク先とは異なる URL をステータスバーに表示させることが可能となる脆弱性が存在します。 CVE-2005-4679 15881 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000665.html  View