3 matches found
Sql injection
SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL commands via the store parameter...
CVE-2010-2461
CVE-2010-2461 describes a SQL injection vulnerability in the storecat.php script of JCE-Tech Overstock 1 , exploitable by supplying a crafted value to the store parameter to execute arbitrary SQL. The NVD entry assigns a CVSS v2 base score 7.5 (HIGH) , with network access, no authentication, and ...
CVE-2010-2461
SQL injection vulnerability in storecat.php in JCE-Tech Overstock 1 allows remote attackers to execute arbitrary SQL commands via the store parameter...