CVE-2005-1822
Qualiteam X-Cart 4.0.8 - SQL Injection via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 8 public exploits for CVE-2005-1822. PoCs published by CENSORED Search Vulnerabilities.
AI-analyzed exploit summary The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8, with an example URL demonstrating the SQL injection vector. It lacks executable exploit code but provides technical details about the vulnerability.
Description
Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) printable parameter to home.php, (3) productid or (4) mode parameter to product.php, (5) id parameter to error_message.php, (6) section parameter to help.php, (7) mode parameter to orders.php, (8) mode parameter to register.php, (9) mode parameter to search.php, or the (10) gcid or (11) gcindex parameter to giftcert.php.
Exploits (8)
The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8, with an example URL demonstrating the SQL injection vector. It lacks executable exploit code but provides technical details about the vulnerability.
The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8 due to improper input sanitization. It includes a basic example of an SQL injection attack vector but lacks executable exploit code.
The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8, with example URLs demonstrating potential attack vectors. No actual exploit code is present.
The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8, with an example URL demonstrating the SQL injection vector. It lacks executable exploit code but provides technical details about the vulnerability.
The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8, with example URLs demonstrating potential attack vectors. No actual exploit code is included.
The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8, with an example URL demonstrating the SQL injection vector. It lacks executable exploit code but provides technical details about the vulnerability.
The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8, with example URLs demonstrating potential attack vectors. It lacks executable exploit code but provides technical details for manual exploitation.
The provided text describes SQL injection and XSS vulnerabilities in X-Cart 4.0.8, with an example URL demonstrating the SQL injection vector. It lacks executable exploit code but provides technical details about the vulnerability.