Unscored severity · published Sep 22, 2005
CVE-2005-3039
SQL injection vulnerability in infopage.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idPage parameter
–
CVSS
1.3%
EPSS
No
On KEV
Description
SQL injection vulnerability in infopage.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idPage parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Mall23 · Mall23
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3039
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3039
Exploit
http://securitytracker.com/id?1014882
Exploit
http://systemsecure.org/ssforum/viewtopic.php?t=219
www.securityfocus.com
http://www.securityfocus.com/bid/14803
More from Mall23
–
CVE-2005-3043
SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idOption_Dropdown_2 parameter