CVE-2008-3594

SQL injection vulnerability in viewdetails.php in MagicScripts E-Store Kit-1, E-Store Kit-2, E-Store Kit-1 Pro PayPal Edition, and E-Store Kit-2 PayPal Edition allows remote attackers to execute arbitrary SQL commands via the pid parameter.

Link	Resource
http://www.securityfocus.com/bid/30524	Exploit
http://secunia.com/advisories/31273
http://securityreason.com/securityalert/4139
https://exchange.xforce.ibmcloud.com/vulnerabilities/44159
https://www.exploit-db.com/exploits/6193

Configuration 1

cpe:2.3:a:magicscripts:e-store_kit-2:*:*:paypal:*:*:*:*:* cpe:2.3:a:magicscripts:e-store_kit-2:*:*:*:*:*:*:*:* cpe:2.3:a:magicscripts:e-store_kit-1:*:*:pro_paypal:*:*:*:*:* cpe:2.3:a:magicscripts:e-store_kit-1:*:*:*:*:*:*:*:*

---

Published : 2008-08-11 11:41

Updated : 2017-09-29 01:31

---

NVD link : CVE-2008-3594

Mitre link : CVE-2008-3594

No products.

CWE-89