Vulnerabilities > CVE-2005-4404 - SQL-Injection vulnerability in Media2 Cms Shop
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
SQL injection vulnerability in default.asp in Media2 CMS Shop 18.x allows remote attackers to execute arbitrary SQL commands via the item parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |