CVE-2005-4081

Published: Dec 8, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitrary SQL commands via the username and password parameters in (1) the user login and (2) administrator login pages.

Affected (1)

Products: Alisveristr: Alisveristr E Commerce

1 product

Alisveristr E Commerce

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Alisveristr Alisveristr E Commerce	All versions

References (10)

http://securityreason.com/securityalert/228

Source: cve@mitre.org

http://www.osvdb.org/21622

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/418510/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/15699/

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/23507

Source: cve@mitre.org

http://securityreason.com/securityalert/228

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/21622

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/418510/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15699/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/23507

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.