CVE-2005-1161
OneWorldStore - SQL Injection via idProduct or idCategory or bSpecials Parameter
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-1161. PoCs published by Dcrab.
AI-analyzed exploit summary The provided code is a writeup describing an SQL injection vulnerability in OneWorldStore. It includes example URLs demonstrating how an attacker can inject malicious SQL queries via the 'idProduct' parameter.
Description
Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) owAddItem.asp or (2) owProductDetail.asp, (3) idCategory parameter to owListProduct.asp, or (4) bSpecials parameter to owListProduct.asp.
Exploits (3)
The provided code is a writeup describing an SQL injection vulnerability in OneWorldStore. It includes example URLs demonstrating how an attacker can inject malicious SQL queries via the 'idProduct' parameter.
The provided text describes SQL injection vulnerabilities in OneWorldStore, specifically in the 'owListProduct.asp' page via the 'bSpecials' and 'idCategory' parameters. It outlines the vulnerability but does not include executable exploit code.
The provided text describes an SQL injection vulnerability in OneWorldStore, specifically in the 'idProduct' parameter of the 'owAddItem.asp' page. It lacks executable exploit code but details the vulnerability and potential impact.