Vulnerabilities > CVE-2005-4429 - SQL Injection vulnerability in Cs-Cart 1.3.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
cs-cart
exploit available
NVD
Published: 2005-12-21
Updated: 2008-09-20

Summary

SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) sort_by and (2) sort_order parameters to index.php.

Vulnerable Configurations

Part Description Count
Application
Cs-Cart
1

Exploit-Db

descriptionCS-Cart Multiple SQL Injection Vulnerabilities. CVE-2005-4429. Webapps exploit for php platform
idEDB-ID:27030
last seen2016-02-03
modified2005-12-25
published2005-12-25
reporterr0t3d3Vil
sourcehttps://www.exploit-db.com/download/27030/
titleCS-Cart - Multiple SQL Injection Vulnerabilities

References