Unrated severityNVD Advisory· Published May 2, 2005· Updated Jun 16, 2026
CVE-2005-0907
CVE-2005-0907
Description
Multiple SQL injection vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to category.php, (2) the id parameter to item.php, (3) the lang parameter to index.php, (4) the searchQuery parameter to search_result.php, (5) or the searchTopCategoryID parameter to search_result.php.
Affected products
2cpe:2.3:a:valdersoft:shopping_cart:3.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:valdersoft:shopping_cart:3.0:*:*:*:*:*:*:*
- (no CPE)range: =3.0
Patches
Vulnerability mechanics
References
2- securitytracker.com/idnvdExploitPatch
- www.securityfocus.com/archive/1/394406/2005-03-26/2005-04-01/2nvdExploitVendor Advisory
News mentions
0No linked articles in our index yet.