critical9.8
CVE-2016-10114
SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2.6.1 for Joomla!
Impact
SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2.6.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via vectors involving categorysearch and smartSearch.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Awebsupport | Aweb Cart Watching System For Virtuemart | Version 2.6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/95293
- https://github.com/qemm/joomlasqli
- https://vel.joomla.org/resolved/1897-aweb-cart-watching-system-2-6-0
- https://www.exploit-db.com/exploits/40973/
- http://www.securityfocus.com/bid/95293
- https://github.com/qemm/joomlasqli
- https://vel.joomla.org/resolved/1897-aweb-cart-watching-system-2-6-0
- https://www.exploit-db.com/exploits/40973/