CVE-2014-3978 in TomatoCart
요약 (영어)
SQL injection vulnerability in TomatoCart 1.1.8.6.1 allows remote authenticated users to execute arbitrary SQL commands via the First Name and Last Name fields in a new address book contact.
예약하다
2014. 06. 05.
공개
2014. 10. 20.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 72485 | TomatoCart Address Book SQL 주입 | 89 | 높음 | 정의되지 않음 | CVE-2014-3978 |