CVE-2007-3447

SQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the "basic search box." NOTE: 4.0.2 and other versions might also be affected.

Link	Resource
http://www.h4cky0u.org/viewtopic.php?t=26834
http://www.securityfocus.com/bid/24629
http://secunia.com/advisories/25836	Vendor Advisory
http://osvdb.org/38223	Exploit
http://www.vupen.com/english/advisories/2007/2322	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/35039
https://www.exploit-db.com/exploits/4103

Configuration 1

cpe:2.3:a:bugmall:shopping_cart:*:*:*:*:*:*:*:* cpe:2.3:a:bugmall:shopping_cart:2.5:*:*:*:*:*:*:*

---

Published : 2007-06-27 12:30

Updated : 2017-10-11 01:32

---

NVD link : CVE-2007-3447

Mitre link : CVE-2007-3447

No products.

CWE-89