CVE-2005-3937

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-01 · updated 2026-06-16

Description

SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php.

Affected products

Softbizscripts B2B Trading Marketplace Script: through 1.1

References

http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html
http://secunia.com/advisories/17808
http://www.osvdb.org/21252
http://www.osvdb.org/21253
http://www.osvdb.org/21254
http://www.osvdb.org/21255
http://www.securityfocus.com/bid/15652
http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html
http://secunia.com/advisories/17808
http://www.osvdb.org/21252
http://www.osvdb.org/21253
http://www.osvdb.org/21254

Get alerted when CVE-2005-3937 or the next vulnerability affects your stack