NVD

Id
3633  
Name
CVE-2008-3768  
Description
Multiple SQL injection vulnerabilities in class.ajax.php in Turnkey Web Tools SunShop Shopping Cart before 4.1.5 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in an edit_registry action to index.php, (2) a vector involving the check_email function, and other vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-08-22  
Modified Date
2009-01-29  
Seq
2008-3768  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
22953 3633 CVE-2008-3768 http://demos.turnkeywebtools.com/ss4/docs/change_log.txt  View
22954 3633 CVE-2008-3768 4180  View
22955 3633 CVE-2008-3768 http://www.gulftech.org/?node=research&article_id=00125-08182008  View
22956 3633 CVE-2008-3768 6273  View
22957 3633 CVE-2008-3768 20080818 SunShop <= 4.1.4 SQL Injection  View
22958 3633 CVE-2008-3768 30751  View
22959 3633 CVE-2008-3768 sunshopshoppingcart-classajax-sql-injection(44553)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50864 JVNDB-2008-006174 Turnkey Web Tools SunShop Shopping Cart の class.ajax.php における SQL インジェクションの脆弱性 Turnkey Web Tools SunShop Shopping Cart の class.ajax.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-3768 33881 CVE-2008-3768 3633 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006174.html 2008-08-22 2012-12-20 View