CVE-2005-3043

Mall23 eCommerce - SQL Injection via AddItem.asp idOption_Dropdown_2 Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-3043. PoCs published by SmOk3.

AI-analyzed exploit summary This is a simple HTML form demonstrating an SQL injection vulnerability in Mall23's AddItem.asp. The exploit leverages unsanitized input in the 'idOption_Dropdown_2' parameter to inject arbitrary SQL code.

Description

SQL injection vulnerability in AddItem.asp in Mall23 eCommerce allows remote attackers to execute arbitrary SQL commands via the idOption_Dropdown_2 parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by SmOk3 · textwebappsasp

https://www.exploit-db.com/exploits/26291

View Code ZIP pw:eip

This is a simple HTML form demonstrating an SQL injection vulnerability in Mall23's AddItem.asp. The exploit leverages unsanitized input in the 'idOption_Dropdown_2' parameter to inject arbitrary SQL code.

Classification

Working Poc 90%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: Mall23 (version unspecified)

No auth needed

Prerequisites: Access to the target application's AddItem.asp endpoint

MITRE ATT&CK