Unscored CVE-2007-4121 EUVD-2007-4105GHSA-36gf-p6rh-cj9x

Multiple SQL injection vulnerabilities in admin.aspx in E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Sc…

Published Aug 1, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple SQL injection vulnerabilities in admin.aspx in E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script allow remote attackers to execute arbitrary SQL commands via the (1) EmailAdd (Username) and (2) Pass (password) parameters. NOTE: some of these details are obtained from third party information.

References

ecommerce-admin-sql-injection(35680) vdb-entry
http://outlaw.aria-security.info/?p=11
20070728 E-commerceScripts ALL Apps (Auction Script, Shopping Cart Script and Multi-Vendor E-Shop Script) admin.aspx SQL mailing-list
2944 third-party-advisory
25125 vdb-entry
26277 third-party-advisory