CVE-2010-4632 | BDVDB-2026-44503 Detail
Description#
Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the (1) article parameter to kb.asp, (2) specific parameter to cart.asp, (3) countrycode parameter to contact.asp, and the (4) srch parameter to search.asp. NOTE: the article parameter to pilot.asp is already covered by CVE-2008-2688.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://secunia.com/advisories/30176
- http://packetstormsecurity.org/1011-exploits/aspilotpilotcart-sqlxssinject.txt
- http://advisories.ariko-security.com/november/audyt_bezpieczenstwa_745.html
- http://www.exploit-db.com/exploits/15448
- http://www.securityfocus.com/bid/44698
- http://marc.info/?l=full-disclosure&m=128913521908405&w=2
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.