CVE-2005-2046
DUware DUamazon Pro 3.0-3.1 - SQL Injection via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 7 public exploits for CVE-2005-2046. PoCs published by Dedi Dwianto.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in DUamazon Pro, where the 'iType' parameter in 'type.asp' is not properly sanitized. It lacks actual exploit code but outlines the vulnerability and potential impact.
Description
Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) iCat parameter to cat.asp, (2) iSub parameter to sub.asp, (3) iSub parameter to detail.asp, (4) iPro parameter to review.asp, iCat parameter to (5) catEdit.asp, (6) catDelete.asp, (7) productEdit.asp, or (8) productDelete.asp, or (9) iType parameter to type.asp.
Exploits (7)
The provided text describes a SQL injection vulnerability in DUamazon Pro, where the 'iType' parameter in 'type.asp' is not properly sanitized. It lacks actual exploit code but outlines the vulnerability and potential impact.
The provided text describes a SQL injection vulnerability in DUamazon Pro, specifically in the 'productEdit.asp' page. It highlights the lack of input sanitization, which could lead to data compromise or further exploitation of the underlying database.
The provided text describes SQL injection vulnerabilities in DUamazon Pro, specifically in the productDelete.asp page via the iPro and iCat parameters. It lacks executable exploit code but outlines the vulnerability and potential impact.
The provided text describes a SQL injection vulnerability in DUpaypal Pro, where the 'iSub' parameter in the 'sub.asp' page is not properly sanitized. This allows attackers to manipulate SQL queries, potentially compromising the application or underlying database.
The provided text describes SQL injection vulnerabilities in DUamazon Pro due to improper input sanitization. It includes a sample URL demonstrating the vulnerability but lacks executable exploit code.
The provided text describes a SQL injection vulnerability in DUamazon Pro, where user-supplied input is not properly sanitized in the 'detail.asp' page. The example URL demonstrates a potential injection point via the 'iPro' and 'iSub' parameters.
The provided text describes a SQL injection vulnerability in DUamazon Pro, specifically in the 'catDelete.asp' endpoint via the 'iCat' parameter. It lacks executable exploit code but outlines the vulnerability and potential impact.