CVE-2016-3694

Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, allow remote attackers to execute arbitrary SQL commands via the 1 ordersstatus or 2 customersstatus parameter to api/easybill/easybillcsv.php...

PT-2017-8409

Name of the Vulnerable Software and Affected Versions modified eCommerce Shopsoftware version 2.0.0.0 revision 9678 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the orders status or customers status parameter to the...

CVE-2016-3694: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, allow remote attackers to execute arbitrary SQL commands via the 1 ordersstatus or 2 customersstatus parameter to api/easybill/easybillcsv.php...