CVE-2005-3937

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-3937
SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php.

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html Broken Link
http://secunia.com/advisories/17808 Third Party Advisory
http://www.osvdb.org/21252 Broken Link
http://www.osvdb.org/21253 Broken Link
http://www.osvdb.org/21254 Broken Link
http://www.osvdb.org/21255 Broken Link
http://www.securityfocus.com/bid/15652 Broken Link
http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html Broken Link
http://secunia.com/advisories/17808 Third Party Advisory
http://www.osvdb.org/21252 Broken Link
http://www.osvdb.org/21253 Broken Link
http://www.osvdb.org/21254 Broken Link
http://www.osvdb.org/21255 Broken Link
http://www.securityfocus.com/bid/15652 Broken Link
Configurations

Configuration 1 (hide)

cpe:2.3:a:softbizscripts:b2b_trading_marketplace_script:*:*:*:*:*:*:*:*
History

06 Apr 2026, 14:41

Type Values Removed Values Added
CPE cpe:2.3:a:softbiz:b2b_trading_marketplace_script:*:*:*:*:*:*:*:* cpe:2.3:a:softbizscripts:b2b_trading_marketplace_script:*:*:*:*:*:*:*:*
First Time Softbizscripts
Softbizscripts b2b Trading Marketplace Script
References () http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html - () http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html - Broken Link
References () http://secunia.com/advisories/17808 - Vendor Advisory () http://secunia.com/advisories/17808 - Third Party Advisory
References () http://www.osvdb.org/21252 - () http://www.osvdb.org/21252 - Broken Link
References () http://www.osvdb.org/21253 - () http://www.osvdb.org/21253 - Broken Link
References () http://www.osvdb.org/21254 - () http://www.osvdb.org/21254 - Broken Link
References () http://www.osvdb.org/21255 - () http://www.osvdb.org/21255 - Broken Link
References () http://www.securityfocus.com/bid/15652 - Exploit () http://www.securityfocus.com/bid/15652 - Broken Link

21 Nov 2024, 00:03

Type Values Removed Values Added
References () http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html - () http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html -
References () http://secunia.com/advisories/17808 - Vendor Advisory () http://secunia.com/advisories/17808 - Vendor Advisory
References () http://www.osvdb.org/21252 - () http://www.osvdb.org/21252 -
References () http://www.osvdb.org/21253 - () http://www.osvdb.org/21253 -
References () http://www.osvdb.org/21254 - () http://www.osvdb.org/21254 -
References () http://www.osvdb.org/21255 - () http://www.osvdb.org/21255 -
References () http://www.securityfocus.com/bid/15652 - Exploit () http://www.securityfocus.com/bid/15652 - Exploit
Information

Published : 2005-12-01 06:03

Updated : 2026-04-06 14:41

NVD link : CVE-2005-3937

Mitre link : CVE-2005-3937

CVE.ORG link : CVE-2005-3937

JSON object : View

Products Affected

softbizscripts

  • b2b_trading_marketplace_script
CWE
NVD-CWE-Other