4 matches found
CVE-2012-5294
SQL injection vulnerability in artdetalle.php in MyStore Xpress Tienda Virtual allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2012-5294
CVE-2012-5294 describes a SQL injection in art_detalle.php of MyStore Xpress Tienda Virtual, exploitable by passing an id parameter to remotely execute arbitrary SQL commands. Multiple connected sources (NVD entry and related records) confirm the vendor/product context and the vulnerable componen...
CVE-2012-5294: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in artdetalle.php in MyStore Xpress Tienda Virtual allows remote attackers to execute arbitrary SQL commands via the id parameter...
MyStore Tienda Virtual SQL Injection
======================================================================================== | Title : SQL Injection MyStore Tienda Virtual | | Author : Arturo Zamora | | email : [email protected] | | DAte : 02/01/2012 | | Verified : yes | | Risk : High | | Published: | | Script : MyStore...