CVE-2005-1293

StorePortal 2.63 - SQL Injection

Title source: llm
STIX 2.1

Description

Multiple SQL injection vulnerabilities in default.asp in StorePortal 2.63 allow remote attackers to execute arbitrary SQL commands via the (1) language, (2) bpic, (3) idcategory, (4) content, (5) keyword, or (6) idproduct parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Dcrab · textwebappsasp
https://www.exploit-db.com/exploits/25529

References (3)

Core 3
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111445131808328&w=2
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/15071

Scores

EPSS 0.0112
EPSS Percentile 78.4%

Details

Status published
Products (1)
storeportal/storeportal 2.63
Published May 02, 2005
Tracked Since Feb 18, 2026