high7.5Public exploit code
CVE-2010-4845
Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the (1) ts parameter to details…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Projekt Shop - 'details.php' Multiple SQL Injections2010-12-18 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the (1) ts parameter to details.php and possibly the (2) ilceler parameter to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mhproducts | Projekt Shop | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/42711
- http://www.exploit-db.com/exploits/15773
- http://www.securityfocus.com/bid/45506
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64205
- http://secunia.com/advisories/42711
- http://www.exploit-db.com/exploits/15773
- http://www.securityfocus.com/bid/45506
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64205