SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via the ordersn parameter in an orderquery action...
7.5CVSS9.1AI score0.01084EPSS
SaveExploits2References2Affected Software1
Cvelist•added 2009/05/12 4:0 p.m.•24 views
CVE-2009-1622
SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via the ordersn parameter in an orderquery action...