CVE-2005-3914

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-11-30 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in AFFcommerce 1.1.4 allow remote attackers to execute arbitrary SQL commands via (1) the cl parameter to SubCategory.php and the item_id parameter in (2) ItemInfo.php and (3) ItemReview.php.

Affected products

Affcommerce: 1.1.4

References

http://pridels0.blogspot.com/2005/11/affcommerce-multiple-sql-inj.html
http://secunia.com/advisories/17690
http://www.osvdb.org/21070
http://www.osvdb.org/21071
http://www.osvdb.org/21072
http://www.securityfocus.com/bid/15545
http://www.vupen.com/english/advisories/2005/2550
http://pridels0.blogspot.com/2005/11/affcommerce-multiple-sql-inj.html
http://secunia.com/advisories/17690
http://www.osvdb.org/21070
http://www.osvdb.org/21071
http://www.osvdb.org/21072

Get alerted when CVE-2005-3914 or the next vulnerability affects your stack