CVE-2005-4404: MEDIA2 CMS Shop

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in default.asp in Media2 CMS Shop 18.x allows remote attackers to execute arbitrary SQL commands via the item parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources.

Affected products

• MEDIA2 CMS MEDIA2 CMS Shop: up to and including 18.2

Published 2005-12-20. Last modified 2026-06-16.