CVE-2005-3937
Softbiz B2B Trading Marketplace Script < 1.1 - SQL Injection via cid Parameter
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2005-3937. PoCs published by AnGrY BoY, r0t.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in B2B Trading Marketplace Script, allowing an attacker to extract admin credentials via UNION-based SQLi in the 'cid' parameter of 'selloffers.php' or 'cat_sell.php'.
Description
SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php.
Exploits (5)
This exploit demonstrates a SQL injection vulnerability in B2B Trading Marketplace Script, allowing an attacker to extract admin credentials via UNION-based SQLi in the 'cid' parameter of 'selloffers.php' or 'cat_sell.php'.
The provided text describes a SQL injection vulnerability in Softbiz B2B Trading Marketplace versions 1.1 and prior. It explains the cause and potential impact but does not include actual exploit code or a proof-of-concept.
The provided text describes SQL injection vulnerabilities in Softbiz B2B Trading Marketplace due to improper input sanitization. It includes a sample URL demonstrating the vulnerability but lacks executable exploit code.
The provided text describes a SQL injection vulnerability in Softbiz B2B Trading Marketplace versions 1.1 and prior. It explains the cause and potential impact but does not include actual exploit code or a proof-of-concept.
The provided text describes SQL injection vulnerabilities in Softbiz B2B Trading Marketplace due to improper input sanitization. It includes a sample URL demonstrating the vulnerability but lacks executable exploit code.