Vulnerabilities > Igeneric
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-05-16 | CVE-2007-2717 | SQL Injection vulnerability in Igeneric IG Shop 1.4 SQL injection vulnerability in shop/page.php in iGeneric (iG) Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the type_id[] parameter, a different vector than CVE-2005-0537. | 7.5 |
| 2007-01-09 | CVE-2007-0134 | Code Injection vulnerability in Igeneric IG Shop 1.0/1.4 Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, which is supplied to an eval function call in (1) cart.php and (2) page.php. | 7.5 |
| 2007-01-09 | CVE-2007-0133 | SQL-Injection vulnerability in iG Shop Multiple SQL injection vulnerabilities in display_review.php in iGeneric iG Shop 1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id or (2) user_login_cookie parameter. | 7.5 |
| 2007-01-09 | CVE-2007-0132 | SQL Injection vulnerability in Igeneric IG Shop 1.4 SQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the id parameter. | 7.5 |
| 2007-01-09 | CVE-2007-0130 | SQL Injection vulnerability in Igeneric IG Calendar 1.0 SQL injection vulnerability in user.php in iGeneric iG Calendar 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. | 7.5 |
| 2005-02-21 | CVE-2005-0537 | SQL-Injection vulnerability in Igeneric Free Shopping Cart 1.2 Multiple SQL injection vulnerabilities in page.php for iGeneric (iG) Shop 1.2 may allow remote attackers to execute arbitrary SQL statements via the (1) cats, (2) l_price, or (3) u_price parameters. | 7.5 |