CVE-2005-3937
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD
Description
SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php.
Affected (1)
Products: Softbizscripts: B2b Trading Marketplace Script
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 1.1 |
References (14)
Source: cve@mitre.org
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Timeline
No history available yet.