CVEvulnerability
CVE-2010-4362
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-12-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the (1) selStock parameter to search.asp and the (2) orderBy parameter to showAlllistings.asp.
Affected configurations
• micronetsoft rv dealer website
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/41319 Vendor Advisory
- http://www.exploit-db.com/exploits/15629 Exploit
- http://www.securityfocus.com/bid/45089 www.securityfocus.com
- http://secunia.com/advisories/41319 Vendor Advisory
- http://www.exploit-db.com/exploits/15629 Exploit
- http://www.securityfocus.com/bid/45089 www.securityfocus.com