{"api_version":"1","generated_at":"2026-07-24T19:37:21+00:00","cve":"CVE-2005-1161","urls":{"html":"https://cve.report/CVE-2005-1161","api":"https://cve.report/api/cve/CVE-2005-1161.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-1161","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-1161"},"summary":{"title":"CVE-2005-1161","description":"Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) owAddItem.asp or (2) owProductDetail.asp, (3) idCategory parameter to owListProduct.asp, or (4) bSpecials parameter to owListProduct.asp.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-05-02 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab","name":"http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["URL Repurposed"],"title":"OneworldStore.com is for sale | HugeDomains","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://www.securityfocus.com/bid/13183","name":"http://www.securityfocus.com/bid/13183","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"],"title":"OneWorldStore OWProductDetail.ASP SQL Injection Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.osvdb.org/15518","name":"http://www.osvdb.org/15518","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://securitytracker.com/id?1013720","name":"http://securitytracker.com/id?1013720","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"SecurityTracker.com Archives - OneWorldStore Input Validation Flaws Permit SQL Injection and Cross-Site Scripting Attacks","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/14969","name":"http://secunia.com/advisories/14969","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Secunia - Advisories - OneWorldStore Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/15520","name":"http://www.osvdb.org/15520","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://marc.info/?l=bugtraq&m=111352017704126&w=2","name":"http://marc.info/?l=bugtraq&m=111352017704126&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'Multiple multiple sql injection/errors and xss vulnerabilities in' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/15519","name":"http://www.osvdb.org/15519","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20097","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20097","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/13181","name":"http://www.securityfocus.com/bid/13181","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"],"title":"OneWorldStore OWAddItem.ASP SQL Injection Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/13182","name":"http://www.securityfocus.com/bid/13182","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"],"title":"OneWorldStore OWListProduct.ASP Multiple SQL Injection Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1161","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1161","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"1161","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oneworldstore","cpe5":"oneworldstore","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T21:44:05.295Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1013720","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1013720"},{"name":"13183","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/13183"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab"},{"name":"13182","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/13182"},{"name":"15518","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/15518"},{"name":"15520","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/15520"},{"name":"oneworldstore-product-category-sql-injection(20097)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20097"},{"name":"13181","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/13181"},{"name":"15519","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/15519"},{"name":"20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=111352017704126&w=2"},{"name":"14969","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/14969"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-04-14T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) owAddItem.asp or (2) owProductDetail.asp, (3) idCategory parameter to owListProduct.asp, or (4) bSpecials parameter to owListProduct.asp."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-10T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"1013720","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1013720"},{"name":"13183","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/13183"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab"},{"name":"13182","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/13182"},{"name":"15518","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/15518"},{"name":"15520","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/15520"},{"name":"oneworldstore-product-category-sql-injection(20097)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20097"},{"name":"13181","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/13181"},{"name":"15519","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/15519"},{"name":"20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=111352017704126&w=2"},{"name":"14969","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/14969"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-1161","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) owAddItem.asp or (2) owProductDetail.asp, (3) idCategory parameter to owListProduct.asp, or (4) bSpecials parameter to owListProduct.asp."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1013720","refsource":"SECTRACK","url":"http://securitytracker.com/id?1013720"},{"name":"13183","refsource":"BID","url":"http://www.securityfocus.com/bid/13183"},{"name":"http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab","refsource":"CONFIRM","url":"http://www.oneworldstore.com/support_security_issue_updates.asp#April_15_2005_DCrab"},{"name":"13182","refsource":"BID","url":"http://www.securityfocus.com/bid/13182"},{"name":"15518","refsource":"OSVDB","url":"http://www.osvdb.org/15518"},{"name":"15520","refsource":"OSVDB","url":"http://www.osvdb.org/15520"},{"name":"oneworldstore-product-category-sql-injection(20097)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/20097"},{"name":"13181","refsource":"BID","url":"http://www.securityfocus.com/bid/13181"},{"name":"15519","refsource":"OSVDB","url":"http://www.osvdb.org/15519"},{"name":"20050414 Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=111352017704126&w=2"},{"name":"14969","refsource":"SECUNIA","url":"http://secunia.com/advisories/14969"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-1161","datePublished":"2005-04-18T04:00:00.000Z","dateReserved":"2005-04-18T00:00:00.000Z","dateUpdated":"2024-08-07T21:44:05.295Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-05-02 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oneworldstore:oneworldstore:*:*:*:*:*:*:*:*","matchCriteriaId":"200AFE97-E718-41C0-86A0-9FE8030AAA52"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"1161","Ordinal":"1","Title":"CVE-2005-1161","CVE":"CVE-2005-1161","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"1161","Ordinal":"1","NoteData":"Multiple SQL injection vulnerabilities in OneWorldStore allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to (1) owAddItem.asp or (2) owProductDetail.asp, (3) idCategory parameter to owListProduct.asp, or (4) bSpecials parameter to owListProduct.asp.","Type":"Description","Title":"CVE-2005-1161"},{"CveYear":"2005","CveId":"1161","Ordinal":"2","NoteData":"2005-04-18","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"1161","Ordinal":"3","NoteData":"2017-07-10","Type":"Other","Title":"Modified"}]}}}