CVE-2004-1881

SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows remote attackers to execute arbitrary SQL commands via the strItems parameter.

CVSS Metrics

Affected Products (2)

GitHub Security Advisory GHSA-6wpq-3g63-3x4f

SQL injection vulnerability in (1) mailorder.asp or (2) payonline.asp in CactuShop 5.x allows...

References (16)

• http://marc.info/?l=bugtraq&m=108075059013762&w=2
• http://secunia.com/advisories/11272 Patch
• http://securitytracker.com/id?1009601 Exploit
• http://www.osvdb.org/4785
• http://www.osvdb.org/4786
• http://www.s-quadra.com/advisories/Adv-20040331.txt Exploit
• http://www.securityfocus.com/bid/10019 Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15686
• http://marc.info/?l=bugtraq&m=108075059013762&w=2
• http://secunia.com/advisories/11272 Patch
• http://securitytracker.com/id?1009601 Exploit
• http://www.osvdb.org/4785
• http://www.osvdb.org/4786
• http://www.s-quadra.com/advisories/Adv-20040331.txt Exploit
• http://www.securityfocus.com/bid/10019 Exploit