CVE-2005-1161

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.59%

Published

May 2, 2005

Modified

Jun 16, 2026

Public PoC / Exploit (4)

All weaponized →

Exploit-DBOneWorldStore - 'OWAddItem.asp' SQL Injection Exploit-DBOneWorldStore - 'OWListProduct.asp' Multiple SQL Injections Exploit-DBOneWorldStore - 'OWProductDetail.asp' SQL Injection TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) owAddItem.asp or (2) owProductDetail.asp, (3) idCategory parameter to owListProduct.asp, or (4) bSpecials parameter to owListProduct.asp.

Affected Products (1)

oneworldstore · oneworldstorevulnerable

References (20)

http://marc.info/?l=bugtraq&m=111352017704126&w=2

http://secunia.com/advisories/14969

Patch

http://securitytracker.com/id?1013720

Exploit

http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab

URL Repurposed

http://www.osvdb.org/15518

http://www.osvdb.org/15519

http://www.osvdb.org/15520

http://www.securityfocus.com/bid/13181

KEV Catalog EPSS Scores Vendors All CVEs