packetstorm.linuxsecurity.com
http://packetstorm.linuxsecurity.com/0808-exploits/powergap-sql.txt CVE-2008-3561
POWERGAP ShopSystem - 's03.php' SQL Injection
Record summary
CVE-2008-3561 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in s03.php in Powergap Shopsystem, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the ag parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBPOWERGAP ShopSystem - 's03.php' SQL InjectionExploitDB exploitby Rohit BansalNot analyzed1 file
References
531382Third-party advisory
http://secunia.com/advisories/31382 30558vdb entry
http://www.securityfocus.com/bid/30558 shopsystem-s03-sql-injection(44270)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/44270 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-3561