high7.5
CVE-2011-5198
SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the SearchFor paramet…
Impact
SQL injection vulnerability in search.php in Neturf eCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the SearchFor parameter. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Neturf | Ecommerce Shopping Cart | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/78068
- http://packetstormsecurity.org/files/view/108231/neturf-xss.txt
- http://secunia.com/advisories/47354
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72037
- http://osvdb.org/78068
- http://packetstormsecurity.org/files/view/108231/neturf-xss.txt
- http://secunia.com/advisories/47354
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72037