CVEvulnerability
CVE-2005-3937
7.5 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2005-12-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php.
Affected configurations
• softbizscripts b2b trading marketplace script (<= 1.1)
References
- http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html Broken Link
- http://secunia.com/advisories/17808 Third Party Advisory
- http://www.osvdb.org/21252 Broken Link
- http://www.osvdb.org/21253 Broken Link
- http://www.osvdb.org/21254 Broken Link
- http://www.osvdb.org/21255 Broken Link
- http://www.securityfocus.com/bid/15652 Broken Link
- http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html Broken Link
- http://secunia.com/advisories/17808 Third Party Advisory
- http://www.osvdb.org/21252 Broken Link
- http://www.osvdb.org/21253 Broken Link
- http://www.osvdb.org/21254 Broken Link
- http://www.osvdb.org/21255 Broken Link
- http://www.securityfocus.com/bid/15652 Broken Link