What’s Vulnerable › Vulnerabilities

CVE-2005-4035

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-12-06 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prod, and (2) brid parameters to (a) view.php; the (3) the bid parameter to (b) viewbrands.php; and the (4) grp and (5) cat parameters to index.php.

References

• http://pridels0.blogspot.com/2005/12/ecommerce-enterprise-edition-sql-inj.html
• http://secunia.com/advisories/17881
• http://www.osvdb.org/21466
• http://www.osvdb.org/21467
• http://www.osvdb.org/21468
• http://www.securityfocus.com/bid/15707
• http://www.vupen.com/english/advisories/2005/2744
• http://pridels0.blogspot.com/2005/12/ecommerce-enterprise-edition-sql-inj.html
• http://secunia.com/advisories/17881
• http://www.osvdb.org/21466
• http://www.osvdb.org/21467
• http://www.osvdb.org/21468

Get alerted when CVE-2005-4035 or the next vulnerability affects your stack