CVE-2015-2562

2015-03-2014:00:00

mitre

www.cve.org

8.5 High

AI Score

Confidence

Low

0.035 Low

EPSS

Percentile

91.6%

JSON

Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) search_category_id, (2) sort_order, or (3) filter_manufacturer_ids in a displayproducts action to index.php.