Vulnerability Details CVE-2012-5300
SQL injection vulnerability in art_catalogo.php in MyStore Xpress Tienda Virtual 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 67.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://1337day.com/exploits/17328
- http://www.exploit-db.com/exploits/18306
- http://www.securityfocus.com/bid/51243
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72108
- http://1337day.com/exploits/17328
- http://www.exploit-db.com/exploits/18306
- http://www.securityfocus.com/bid/51243
- https://exchange.xforce.ibmcloud.com/vulnerabilities/72108
Products affected by CVE-2012-5300
-
cpe:2.3:a:mystorexpress:tienda_virtual:2.0