high7.5Public exploit code
CVE-2010-4872
SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the specific parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ASPilot Pilot Cart 7.3 - 'newsroom.asp' SQL Injection2010-11-12 · webapps · asp · Verified
Impact
SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the specific parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pilotcart | Pilot Cart | Version 7.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/files/view/95777/aspilotpilotcart-sql.txt
- http://securityreason.com/securityalert/8428
- http://www.exploit-db.com/exploits/15497
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63217
- http://packetstormsecurity.org/files/view/95777/aspilotpilotcart-sql.txt
- http://securityreason.com/securityalert/8428
- http://www.exploit-db.com/exploits/15497
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63217