high7.5
CVE-2010-4147
Multiple SQL injection vulnerabilities in Pentasoft Avactis Shopping Cart 1.9.1 build 8356 free edition and earlier allow remote attackers to execute arbitrary…
Impact
Multiple SQL injection vulnerabilities in Pentasoft Avactis Shopping Cart 1.9.1 build 8356 free edition and earlier allow remote attackers to execute arbitrary SQL commands via the User-Agent header to (1) index.php and (2) product-list.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avactis | Avactis Shopping Cart | through 1.9.1 Versions 1.8.0, 1.8.1, 1.8.2, 1.9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://holisticinfosec.org/content/view/159/45/
- http://secunia.com/advisories/41764
- http://www.avactis.com/forums/index.php?showtopic=5317
- http://www.osvdb.org/68646
- http://www.osvdb.org/68647
- http://www.securityfocus.com/bid/44104
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62559
- http://holisticinfosec.org/content/view/159/45/
- http://secunia.com/advisories/41764
- http://www.avactis.com/forums/index.php?showtopic=5317
- http://www.osvdb.org/68646
- http://www.osvdb.org/68647
- http://www.securityfocus.com/bid/44104
- https://exchange.xforce.ibmcloud.com/vulnerabilities/62559