CVE

Id
8728  
CVE No.
CVE-2004-0300  
Status
Candidate  
Description
SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via (1) the cat parameter in shop.php, (2) the id parameter in more.php, (3) the cat_manufacturer parameter in shop_by_brand.php, or (4) the id parameter in listing.php.  
Phase
Modified (20051204)  
Votes
NOOP(4) Armstrong, Cole, Cox, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
55003 8728 CVE-2004-0300 BUGTRAQ:20040218 ZH2004-07SA (security advisory): Multiple Sql injection  View
55004 8728 CVE-2004-0300 URL:http://marc.info/?l=bugtraq&m=107712117913185&w=2  View
55005 8728 CVE-2004-0300 MISC:http://www.zone-h.org/en/advisories/read/id=3972/  View
55006 8728 CVE-2004-0300 MISC:http://www.systemsecure.org/advisories/ssadvisory16022004.php  View
55007 8728 CVE-2004-0300 OSVDB:3973  View
55008 8728 CVE-2004-0300 URL:http://www.osvdb.org/3973  View
55009 8728 CVE-2004-0300 SECTRACK:1009092  View
55010 8728 CVE-2004-0300 URL:http://securitytracker.com/alerts/2004/Feb/1009092.html  View
55011 8728 CVE-2004-0300 SECUNIA:10902  View
55012 8728 CVE-2004-0300 URL:http://secunia.com/advisories/10902/  View
55013 8728 CVE-2004-0300 XF:onlinestorekit-more-sql-injection(15232)  View
55014 8728 CVE-2004-0300 URL:http://xforce.iss.net/xforce/xfdb/15232  View
55015 8728 CVE-2004-0300 BID:9676  View
55016 8728 CVE-2004-0300 URL:http://www.securityfocus.com/bid/9676  View
55017 8728 CVE-2004-0300 BID:9687  View

Related JVN