Search vulnerabilities

Results 3

Export CSV
CVE-2008-4879

SQL injection vulnerability in prod.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2008-4880.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Products
CVE-2008-4880

SQL injection vulnerability in prodshow.php in Maran PHP Shop allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2008-4879.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2008-6296

admin.php in Maran PHP Shop allows remote attackers to bypass authentication and gain administrative access by setting the user cookie to "demo."

CVSS 2.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Products