CVE-2010-4147

CVE-2010-4147 affects Pentasoft Avactis Shopping Cart 1.9.1 build 8356 free edition and earlier. The vulnerability is multiple SQL injections exploitable via the User-Agent header to index.php and product-list.php, enabling remote attackers to execute arbitrary SQL commands. Documents do not prov...