CVEvulnerability
CVE-2005-4081
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-12-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitrary SQL commands via the username and password parameters in (1) the user login and (2) administrator login pages.
Affected configurations
• alisveristr alisveristr e-commerce
References
- http://securityreason.com/securityalert/228 securityreason.com
- http://www.osvdb.org/21622 www.osvdb.org
- http://www.securityfocus.com/archive/1/418510/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/15699/ Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23507 exchange.xforce.ibmcloud.com
- http://securityreason.com/securityalert/228 securityreason.com
- http://www.osvdb.org/21622 www.osvdb.org
- http://www.securityfocus.com/archive/1/418510/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/15699/ Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23507 exchange.xforce.ibmcloud.com