CVE-2012-5294

SQL injection vulnerability in artdetalle.php in MyStore Xpress Tienda Virtual allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-5294

CVE-2012-5294 describes a SQL injection in art_detalle.php of MyStore Xpress Tienda Virtual, exploitable by passing an id parameter to remotely execute arbitrary SQL commands. Multiple connected sources (NVD entry and related records) confirm the vendor/product context and the vulnerable componen...

MyStore Tienda Virtual SQL Injection

======================================================================================== | Title : SQL Injection MyStore Tienda Virtual | | Author : Arturo Zamora | | email : [email protected] | | DAte : 02/01/2012 | | Verified : yes | | Risk : High | | Published: | | Script : MyStore...