CVE-2015-1476 | BDVDB-2026-67871 Detail

Description#

Multiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to execute arbitrary SQL commands via the (1) productbycat parameter to product.php, or (2) username or (3) password parameter to __admin/index.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.exploit-db.com/exploits/35878
http://packetstormsecurity.com/files/130073/ecommerceMajor-SQL-Injection.html
http://osvdb.org/show/osvdb/117569
http://osvdb.org/show/osvdb/117570

Exploit#

http://www.exploit-db.com/exploits/35878

History#

Version 12015-02-04Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.