CVE-2020-15468

Persian VIP Download Script 1.0 allows SQL Injection via the cartedit.php active parameter...

CVE-2020-15468

Persian VIP Download Script 1.0 allows SQL Injection via the cartedit.php active parameter...

CVE-2020-15468

CVE-2020-15468 affects Persian VIP Download Script 1.0 and enables SQL Injection through the cart_edit.php active parameter. Public records (NVD) assign CVSS‑3.1 base score 9.8 (NETWORK, LOW attack complexity, no privileges required, UINONE, scope UNCHANGED; CONFIDENTIALITY, INTEGRITY, AVAILABILI...

SQL Servers Time-based SQL Injection (CVE-2011-4710; CVE-2019-13978; CVE-2019-16065; CVE-2019-16119; CVE-2019-16383; CVE-2019-16692; CVE-2020-15468; CVE-2020-26518; CVE-2020-29284; CVE-2021-21915; CVE-2021-21916; CVE-2021-21917; CVE-2022-23337; CVE-2022-25149)

SQL injection techniques can allow remote attackers to execute SQL commands on SQL servers. Successful exploitation could allow attacker to disclose confidential information, modify or shut down the database or execute arbitrary code on affected servers...