CVE-2013-7193 in C2C Forward Auction Creator
Résumé (Anglaise)
Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) pa parameter to auction/asp/list.asp, or the (2) UserID or (3) Password to auction/casp/admin.asp.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Réserver
20/12/2013
Divulgation
20/12/2013
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 65848 | Etoshop C2C Forward Auction Creator injection SQL | 89 | Élevé | Unavailable | CVE-2013-7193 |