SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php.
Vulnerable Products 1
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Softbiz B2b_Trading_Marketplace_Script
cpe:2.3:a:softbiz:b2b_trading_marketplace_script:*:*:*:*:*:*:*:*
|
— |
<= 1.1
|
References 7
http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html
cve@mitre.org
http://secunia.com/advisories/17808
cve@mitre.org
http://www.osvdb.org/21252
cve@mitre.org
http://www.osvdb.org/21253
cve@mitre.org
http://www.osvdb.org/21254
cve@mitre.org
http://www.osvdb.org/21255
cve@mitre.org
http://www.securityfocus.com/bid/15652
cve@mitre.org