CVE-2007-2959

Published: May 31, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in manufacturer.php in cpCommerce before 1.1.0 allows remote attackers to execute arbitrary SQL commands via the id_manufacturer parameter.

Affected (10)

Products: Cpcommerce: Cpcommerce

Cpcommerce

1 product

Cpcommerce

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Cpcommerce Cpcommerce	Version 1.0.5.1
Cpcommerce Cpcommerce	Version 1.0.6
Cpcommerce Cpcommerce	Version 1.0.7.1
Cpcommerce Cpcommerce	Version 1.0.7.2
Cpcommerce Cpcommerce	Version 1.0.7.3
Cpcommerce Cpcommerce	Version 1.0.7.4
Cpcommerce Cpcommerce	Version 1.0.7
Cpcommerce Cpcommerce	Version 1.0.8
Cpcommerce Cpcommerce	Version 1.0.9
Cpcommerce Cpcommerce	Version 1.0.9a