CVE-2005-3914

Multiple SQL injection vulnerabilities in AFFcommerce 1.1.4 allow remote attackers to execute arbitrary SQL commands via (1) the cl parameter to…

published November 30, 2005

CVSS
—
EPSS
1%
Percentile
70.3
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in AFFcommerce 1.1.4 allow remote attackers to execute arbitrary SQL commands via (1) the cl parameter to SubCategory.php and the item_id parameter in (2) ItemInfo.php and (3) ItemReview.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01305 · 70.3th percentile
Published
2005-11-30T11:00Z
EPSS history
Timeline
  • 30 NOV 11:00Z
    Multiple SQL injection vulnerabilities in AFFcommerce 1.1.4 allow remote attackers to execute arbitrary SQL commands via (1) the cl parameter to…
    cvelistv5