2 matches found
CVE-2014-10033
SQL injection vulnerability in the updatezone function in catalog/admin/geozones.php in osCommerce Online Merchant 2.3.3.4 and earlier allows remote administrators to execute arbitrary SQL commands via the zID parameter in a list action...
6.5CVSS0.01798EPSS
SaveExploits2References5
CVE-2014-10033: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the updatezone function in catalog/admin/geozones.php in osCommerce Online Merchant 2.3.3.4 and earlier allows remote administrators to execute arbitrary SQL commands via the zID parameter in a list action...
6.5CVSS6.4AI score0.01798EPSS
SaveExploits2References2
20