Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the (1) ts parameter to details.php and possibly the (2) ilceler parameter to index.php.
References
Configurations
History
No history.
Information
Published : 2011-09-27 10:55
Updated : 2017-08-29 01:29
NVD link : CVE-2010-4845
Mitre link : CVE-2010-4845
CVE.ORG link : CVE-2010-4845
JSON object : View
Products Affected
mhproducts
- projekt_shop
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')