Vulnerability Details CVE-2010-4845
Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the (1) ts parameter to details.php and possibly the (2) ilceler parameter to index.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/42711
- http://www.exploit-db.com/exploits/15773
- http://www.securityfocus.com/bid/45506
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64205
- http://secunia.com/advisories/42711
- http://www.exploit-db.com/exploits/15773
- http://www.securityfocus.com/bid/45506
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64205
Products affected by CVE-2010-4845
-
cpe:2.3:a:mhproducts:projekt_shop:*