SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allows remote attackers to execute arbitrary SQL commands via the parent parameter.
                
            References
                    Configurations
                    Configuration 1 (hide)
| AND | 
 
 | 
Configuration 2 (hide)
| 
 | 
History
                    21 Nov 2024, 01:06
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://secunia.com/advisories/36009 - Vendor Advisory | |
| References | () http://www.davidsopas.com/2009/07/25/ixxo-cart-standalone-and-joomla-component-sql-injection/ - | |
| References | () http://www.exploit-db.com/exploits/9276 - | |
| References | () http://www.securityfocus.com/archive/1/505266/100/0/threaded - | |
| References | () http://www.securityfocus.com/bid/35810 - Exploit, Patch | 
Information
                Published : 2009-09-16 19:30
Updated : 2025-04-09 00:30
NVD link : CVE-2009-3215
Mitre link : CVE-2009-3215
CVE.ORG link : CVE-2009-3215
JSON object : View
Products Affected
                joomla
- joomla
php-shop-system
- ixxo_cart
CWE
                
                    
                        
                        CWE-89
                        
            Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
