cve/2005/CVE-2005-1487.md
2024-06-18 02:51:15 +02:00

810 B

CVE-2005-1487

Description

** DISPUTED ** Multiple SQL injection vulnerabilities in FishCart 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) cartid parameter to upstnt.php or (2) psku parameter to display.php. NOTE: the vendor disputes this report, saying that they are forced SQL errors. The original researcher is known to be unreliable.

POC

Reference

Github

No PoCs found on GitHub currently.