Unscored severity · published Dec 31, 2005
CVE-2005-4614
Multiple SQL injection vulnerabilities in digiSHOP 3.1.17 and earlier allow remote attackers to execute arbitrary SQL commands or obtain the full installation path via (1) the c…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in digiSHOP 3.1.17 and earlier allow remote attackers to execute arbitrary SQL commands or obtain the full installation path via (1) the c parameter in cart.php and (2) unspecified search module parameters.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
Digishop · Sum Effect Software
through 3.1.17 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-4614
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-4614
pridels0.blogspot.com
http://pridels0.blogspot.com/2005/11/digishop-3x-sql-injection-vuln.html
Exploit
http://www.osvdb.org/21302
www.osvdb.org
http://www.osvdb.org/21303
www.vupen.com
http://www.vupen.com/english/advisories/2005/2563
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/23357
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/23358
More from Digishop
–
CVE-2006-5164
Multiple cross-site scripting (XSS) vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remote attackers to inject arbitrary web script or HTML via the (1)…