CVE-2005-4081

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-12-08 · updated 2026-06-16

Description

Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitrary SQL commands via the username and password parameters in (1) the user login and (2) administrator login pages.

Affected products

Alisveristr E-Commerce: all versions

References

http://securityreason.com/securityalert/228
http://www.osvdb.org/21622
http://www.securityfocus.com/archive/1/418510/100/0/threaded
http://www.securityfocus.com/bid/15699/
https://exchange.xforce.ibmcloud.com/vulnerabilities/23507
http://securityreason.com/securityalert/228
http://www.osvdb.org/21622
http://www.securityfocus.com/archive/1/418510/100/0/threaded
http://www.securityfocus.com/bid/15699/
https://exchange.xforce.ibmcloud.com/vulnerabilities/23507

Get alerted when CVE-2005-4081 or the next vulnerability affects your stack