CVE-2013-7193 in C2C Forward Auction Creator
Сводка (Английский)
Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) pa parameter to auction/asp/list.asp, or the (2) UserID or (3) Password to auction/casp/admin.asp.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Резервировать
20.12.2013
Раскрытие
20.12.2013
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 65848 | Etoshop C2C Forward Auction Creator SQL-инъекция | 89 | Высокий | Unavailable | CVE-2013-7193 |