CVE-2012-5317

Summary : CVE-2012-5317 is a SQL injection vulnerability in the Bigware Shop software prior to version 2.1.5. The flaw resides in the script main_bigware_43.php, where the lastname parameter in a process action can be manipulated to execute arbitrary SQL commands. Affected software : Bigware Shop...