CVE-2010-2686

CVE-2010-2686 affects SAP TopManage OLK module 1.91.30. Multiple SQL injection vulnerabilities exist in clientes.asp, allowing remote attackers to execute arbitrary SQL commands via (1) PriceFrom, (2) PriceTo, and (3) InvFrom parameters reachable from olk/c_p/searchCart.asp and other vectors duri...