EDB-27030

functional

CS-Cart - Multiple SQL Injections

view exploit source exploit_dbverifiedtype webappsauthor r0t3d3Vilpublished 2005-12-25catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2005-4429UShigh7.5Exploit
SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) sort_by and (2) sort_order parameters to index.php.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan