CVE-2008-0546

Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary SQL commands via the (1) idProduct and (2) options parameters to (a) ajax/ajax_optInventory.asp, or the (2) recid parameter to (b) ajax/ajax_getBrands.asp.

Link	Resource
http://www.candypress.com/CPforum/forum_posts.asp?TID=10630&PN=1	Exploit
http://www.securityfocus.com/bid/27454	Exploit
http://secunia.com/advisories/28662	Vendor Advisory
http://securityreason.com/securityalert/3600
http://www.vupen.com/english/advisories/2008/0314
https://exchange.xforce.ibmcloud.com/vulnerabilities/39939
https://www.exploit-db.com/exploits/4988
http://www.securityfocus.com/archive/1/487058/100/0/threaded

Configuration 1

cpe:2.3:a:shoppingtree:candypress_store:4.1.1.26:*:*:*:*:*:*:* cpe:2.3:a:shoppingtree:candypress_store:4.1:*:*:*:*:*:*:*

---

Published : 2008-02-01 08:00

Updated : 2018-10-15 10:01

---

NVD link : CVE-2008-0546

Mitre link : CVE-2008-0546

No products.

CWE-89