CVE-2005-4035
Web4Future eCommerce Enterprise Edition <2.1 - SQL Injection
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-4035. PoCs published by r0t3d3Vil.
AI-analyzed exploit summary The provided text describes a SQL injection vulnerability in eCommerce Enterprise Edition and Home Edition. It includes a generic example URL demonstrating the vulnerability but lacks executable exploit code.
Description
Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prod, and (2) brid parameters to (a) view.php; the (3) the bid parameter to (b) viewbrands.php; and the (4) grp and (5) cat parameters to index.php.
Exploits (3)
The provided text describes a SQL injection vulnerability in eCommerce Enterprise Edition and Home Edition. It includes a generic example URL demonstrating the vulnerability but lacks executable exploit code.
The provided text describes SQL injection vulnerabilities in eCommerce Enterprise Edition and Home Edition. It includes a generic example URL demonstrating the vulnerability but lacks executable exploit code.
The provided text describes SQL injection vulnerabilities in eCommerce Enterprise Edition and Home Edition, with example URLs demonstrating vulnerable parameters. No actual exploit code is present.