Vulnerability in Softbizscripts B2b Trading Marketplace Script
CVE-2005-3937
SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php.
EPSS: 0.013 (68.6th percentile) — read the EPSS interpretation.
Affected products
- Softbizscripts B2b_trading_marketplace_script
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
- cve@mitre.org (vdb-entry, Broken Link, x_refsource_BID)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_MISC, Broken Link)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)