CVE-2005-4020 - SQL injection vulnerability in create.php in Widget Imprint 1.0.26 and earlier allows remote attackers to execute arbitrary SQL commands via the product_id parameter

Back Back to CVE browser

HIGH

SQL injection vulnerability in create.php in Widget Imprint 1.0.26 and earlier allows remote attackers to execute arbitrary SQL commands via the product_id parameter

Published Dec 5, 2005

7.5

HIGH

CVSS 2.0

EPSS 1.21%

Description

SQL injection vulnerability in create.php in Widget Imprint 1.0.26 and earlier allows remote attackers to execute arbitrary SQL commands via the product_id parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (5)

http://pridels0.blogspot.com/2005/12/widget-imprint-sql-inj-vuln.html
x_refsource_MISC
http://secunia.com/advisories/17840
third-party-advisoryx_refsource_SECUNIA
http://www.osvdb.org/21435
vdb-entryx_refsource_OSVDB
http://www.vupen.com/english/advisories/2005/2740
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-4015
Advisory

Link	Providers	Tags
http://pridels0.blogspot.com/2005/12/widget-imprint-sql-inj-vuln.html		x_refsource_MISC
http://secunia.com/advisories/17840		third-party-advisoryx_refsource_SECUNIA
http://www.osvdb.org/21435		vdb-entryx_refsource_OSVDB
http://www.vupen.com/english/advisories/2005/2740		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-4015		Advisory