CVE-2005-1293

  • Last update: Apr 13, 2023

Description

Multiple SQL injection vulnerabilities in default.asp in StorePortal 2.63 allow remote attackers to execute arbitrary SQL commands via the (1) language, (2) bpic, (3) idcategory, (4) content, (5) keyword, or (6) idproduct parameter.

Software From Fixed in
storeportal / storeportal 2.63 2.63.x

Details

    • Severity: High
  • CVE: CVE-2005-1293
  • Published: May 2, 2005
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P