CVE-2005-0935
ESMI PayPal Storefront - SQL Injection via idpages or id2 Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2005-0935. PoCs published by Dcrab.
AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in ESMI PayPal Storefront, where user-supplied input is not properly sanitized before being used in SQL queries. The example URL demonstrates how an attacker could inject malicious SQL code via the 'id2' parameter.
Description
Multiple SQL injection vulnerabilities in ESMI PayPal Storefront allow remote attackers to execute arbitrary SQL commands via the (1) idpages parameter to pages.php or the (2) id2 parameter to products1.php.
Exploits (2)
The provided text describes an SQL injection vulnerability in ESMI PayPal Storefront, where user-supplied input is not properly sanitized before being used in SQL queries. The example URL demonstrates how an attacker could inject malicious SQL code via the 'id2' parameter.
This is a writeup describing an SQL injection vulnerability in ESMI PayPal Storefront. It provides a URL example demonstrating the vulnerability but lacks executable exploit code.