CVEvulnerability
CVE-2010-4845
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-09-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the (1) ts parameter to details.php and possibly the (2) ilceler parameter to index.php.
Affected configurations
• mhproducts projekt shop
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/42711 Vendor Advisory
- http://www.exploit-db.com/exploits/15773 Exploit
- http://www.securityfocus.com/bid/45506 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64205 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/42711 Vendor Advisory
- http://www.exploit-db.com/exploits/15773 Exploit
- http://www.securityfocus.com/bid/45506 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64205 exchange.xforce.ibmcloud.com