Unrated severityNVD Advisory· Published May 2, 2005· Updated Apr 16, 2026
CVE-2005-0907
CVE-2005-0907
Description
Multiple SQL injection vulnerabilities in Valdersoft Shopping Cart 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to category.php, (2) the id parameter to item.php, (3) the lang parameter to index.php, (4) the searchQuery parameter to search_result.php, (5) or the searchTopCategoryID parameter to search_result.php.
Affected products
1- cpe:2.3:a:valdersoft:shopping_cart:3.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- securitytracker.com/idnvdExploitPatch
- www.securityfocus.com/archive/1/394406/2005-03-26/2005-04-01/2nvdExploitVendor Advisory
News mentions
0No linked articles in our index yet.