Search vulnerabilities

Results 2

Export CSV
CVE-2008-6227

SQL injection vulnerability in buyer_detail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute arbitrary SQL commands via the (1) sid and (2) cid parameters.

CVSS 2.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
CVE-2008-6228

Pre Multi-Vendor Shopping Malls allows remote attackers to bypass authentication and gain administrative access by setting the (1) adminname and the (2) adminid cookies to "admin".

CVSS 2.0 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors