CVE-2010-4147

2010-11-0123:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.003

Percentile

71.7%

JSON

Multiple SQL injection vulnerabilities in Pentasoft Avactis Shopping Cart 1.9.1 build 8356 free edition and earlier allow remote attackers to execute arbitrary SQL commands via the User-Agent header to (1) index.php and (2) product-list.php.

References

holisticinfosec.org/content/view/159/45/

secunia.com/advisories/41764

www.avactis.com/forums/index.php?showtopic=5317

www.osvdb.org/68646

www.osvdb.org/68647

www.securityfocus.com/bid/44104

exchange.xforce.ibmcloud.com/vulnerabilities/62559