{"id":"CVE-2005-3937","aliases":["EUVD-2005-3932","GHSA-68m4-gw7r-wgrq"],"status":"published","title":"SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows...","description":"SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01348,"percentile":0.71625,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2005-12-01T06:03:00Z","modified":"2026-06-16T22:17:55Z","exploits":[{"source":"exploitdb","id":"EDB-10656","title":"SoftBiz B2B trading Marketplace Script - SQL Injection","type":"webapps","platform":"php","date":"2009-12-25","verified":true,"url":"https://www.exploit-db.com/exploits/10656"},{"source":"exploitdb","id":"EDB-26669","title":"SoftBiz B2B trading Marketplace Script 1.1 - 'selloffers.php?cid' SQL Injection","type":"webapps","platform":"php","date":"2005-11-30","verified":true,"url":"https://www.exploit-db.com/exploits/26669"},{"source":"exploitdb","id":"EDB-26670","title":"SoftBiz B2B trading Marketplace Script 1.1 - 'buyoffers.php?cid' SQL Injection","type":"webapps","platform":"php","date":"2005-11-30","verified":true,"url":"https://www.exploit-db.com/exploits/26670"},{"source":"exploitdb","id":"EDB-26671","title":"SoftBiz B2B trading Marketplace Script 1.1 - 'products.php?cid' SQL Injection","type":"webapps","platform":"php","date":"2005-11-30","verified":true,"url":"https://www.exploit-db.com/exploits/26671"},{"source":"exploitdb","id":"EDB-26672","title":"SoftBiz B2B trading Marketplace Script 1.1 - 'profiles.php?cid' SQL Injection","type":"webapps","platform":"php","date":"2005-11-30","verified":true,"url":"https://www.exploit-db.com/exploits/26672"}],"products":[{"vendor":"softbizscripts","product":"b2b_trading_marketplace_script"}],"references":[{"url":"http://www.osvdb.org/21254","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"http://www.securityfocus.com/bid/15652","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link"]},{"url":"http://www.osvdb.org/21252","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/17808","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory"]},{"url":"http://pridels0.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html","tags":["x_refsource_MISC","x_transferred","Broken Link"]},{"url":"http://www.osvdb.org/21255","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"http://www.osvdb.org/21253","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3937"},{"url":"https://github.com/advisories/GHSA-68m4-gw7r-wgrq"}],"sources":{"cve":[{"id":"CVE-2005-3937","description":"SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php.","status":"published","published":"2005-12-01T11:00:00Z","modified":"2024-08-07T23:31:48.647Z","updated_at":"2026-11-02T14:33:38.550354Z"}],"euvd":[{"id":"EUVD-2005-3932","description":"SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php.","status":"published","published":"2005-12-01T11:00:00Z","modified":"2024-08-07T23:31:48Z","updated_at":"2026-11-03T01:15:24.702518Z"}],"ghsa":[{"id":"GHSA-68m4-gw7r-wgrq","title":"SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows...","description":"SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php.","status":"published","published":"2022-05-01T02:22:41Z","modified":"2023-01-30T05:08:14Z","updated_at":"2026-11-02T14:47:48.713469Z"}],"nvd":[{"id":"CVE-2005-3937","description":"SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in (1) selloffers.php, (2) buyoffers.php, (3) products.php, or (4) profiles.php.","status":"published","published":"2005-12-01T06:03:00Z","modified":"2026-06-16T22:17:55.19Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:57.944899Z"}]}}