CVEvulnerability
CVE-2009-3215
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-09-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allows remote attackers to execute arbitrary SQL commands via the parent parameter.
Affected configurations
• php-shop-system ixxo cart
• php-shop-system ixxo cart (<= 3.9.6.0)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/36009 Vendor Advisory
- http://www.davidsopas.com/2009/07/25/ixxo-cart-standalone-and-joomla-component-sql-injection/ www.davidsopas.com
- http://www.exploit-db.com/exploits/9276 www.exploit-db.com
- http://www.securityfocus.com/archive/1/505266/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/35810 Exploit, Patch
- http://secunia.com/advisories/36009 Vendor Advisory
- http://www.davidsopas.com/2009/07/25/ixxo-cart-standalone-and-joomla-component-sql-injection/ www.davidsopas.com
- http://www.exploit-db.com/exploits/9276 www.exploit-db.com
- http://www.securityfocus.com/archive/1/505266/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/35810 Exploit, Patch