Vulnerability Details CVE-2008-4744
SQL injection vulnerability in product_detail.php in DXShopCart 4.30mc allows remote attackers to execute arbitrary SQL commands via the pid parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 33.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://www.packetstormsecurity.org/0808-exploits/dxshopcart-sql.txt
- http://www.securityfocus.com/bid/30772
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44582
- http://www.packetstormsecurity.org/0808-exploits/dxshopcart-sql.txt
- http://www.securityfocus.com/bid/30772
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44582
Products affected by CVE-2008-4744
-
cpe:2.3:a:dxproscripts:dxshopcart:4.30mc