CVE-2005-4035

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.33%

Published

Dec 6, 2005

Modified

Jun 16, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBWeb4Future eCommerce Enterprise Edition 2.1 - 'index.php' Multiple SQL Injections Exploit-DBWeb4Future eCommerce Enterprise Edition 2.1 - 'view.php' Multiple SQL Injections Exploit-DBWeb4Future eCommerce Enterprise Edition 2.1 - 'viewbrands.php?bid' SQL Injection

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prod, and (2) brid parameters to (a) view.php; the (3) the bid parameter to (b) viewbrands.php; and the (4) grp and (5) cat parameters to index.php.

Affected Products (2)

web4future · web4future_ecommerce

References (14)

http://pridels0.blogspot.com/2005/12/ecommerce-enterprise-edition-sql-inj.html

http://secunia.com/advisories/17881

http://www.osvdb.org/21466

http://www.osvdb.org/21467

http://www.osvdb.org/21468

http://www.securityfocus.com/bid/15707

Exploit

http://www.vupen.com/english/advisories/2005/2744

http://pridels0.blogspot.com/2005/12/ecommerce-enterprise-edition-sql-inj.html