Sql injection

2017-01-0402:59:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.0%

JSON

SQL injection vulnerability in the “aWeb Cart Watching System for Virtuemart” extension before 2.6.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via vectors involving categorysearch and smartSearch.

CPENameOperatorVersion
aweb_cart_watching_system_for_virtuemarteq2.6.0

CPE	Name	Operator	Version
	aweb_cart_watching_system_for_virtuemart	eq	2.6.0

References

www.securityfocus.com/bid/95293

github.com/qemm/joomlasqli

vel.joomla.org/resolved/1897-aweb-cart-watching-system-2-6-0

www.exploit-db.com/exploits/40973/