Lucene search

K
cvelistRedhatCVELIST:CVE-2016-3694
HistoryFeb 15, 2017 - 7:00 p.m.

CVE-2016-3694

2017-02-1519:00:00
redhat
www.cve.org
2

AI Score

10

Confidence

High

EPSS

0.003

Percentile

66.1%

Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, allow remote attackers to execute arbitrary SQL commands via the (1) orders_status or (2) customers_status parameter to api/easybill/easybillcsv.php.

AI Score

10

Confidence

High

EPSS

0.003

Percentile

66.1%