CVE-2008-3412

SQL injection vulnerability in Comsenz EPShop (aka ECShop) before 3.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter in a (1) pro_show or (2) disppro action to the default URI.

Link	Resource
http://www.securityfocus.com/bid/30387	Exploit
http://securityreason.com/securityalert/4090
https://exchange.xforce.ibmcloud.com/vulnerabilities/44025
https://www.exploit-db.com/exploits/6139

Configuration 1

cpe:2.3:a:ecshop:epshop:2.1.1:c:*:*:*:*:*:* cpe:2.3:a:ecshop:epshop:2.0.2:a:*:*:*:*:*:* cpe:2.3:a:ecshop:epshop:2.0.2:*:*:*:*:*:*:* cpe:2.3:a:ecshop:epshop:2.1.1:*:*:*:*:*:*:* cpe:2.3:a:ecshop:epshop:2.1.1:a:*:*:*:*:*:* cpe:2.3:a:ecshop:epshop:2.1.0:*:*:*:*:*:*:* cpe:2.3:a:ecshop:epshop:2.1.2:b:*:*:*:*:*:* cpe:2.3:a:ecshop:epshop:2.0.0:*:*:*:*:*:*:* cpe:2.3:a:ecshop:epshop:*:*:*:*:*:*:*:* cpe:2.3:a:ecshop:epshop:2.0.1:*:*:*:*:*:*:* cpe:2.3:a:ecshop:epshop:2.0.5:*:*:*:*:*:*:* cpe:2.3:a:ecshop:epshop:2.0.3:*:*:*:*:*:*:* cpe:2.3:a:ecshop:epshop:2.1.2:*:*:*:*:*:*:* cpe:2.3:a:ecshop:epshop:2.1.2:a:*:*:*:*:*:* cpe:2.3:a:ecshop:epshop:2.1.1:b:*:*:*:*:*:*

---

Published : 2008-07-31 05:41

Updated : 2017-09-29 01:31

---

NVD link : CVE-2008-3412

Mitre link : CVE-2008-3412

No products.

CWE-89