CVE-2010-4362

CVE-2010-4362 affects MicroNetsoft RV Dealer Website. The vulnerability is multiple SQL injection flaws allowing remote attackers to inject arbitrary SQL via the selStock parameter in search.asp and the orderBy parameter in showAlllistings.asp. Root cause attributed to improper handling of user-s...

CVE-2010-4919

CVE-2010-4919 describes an SQL injection in detail.asp of Micronetsoft RV Dealer Website 1.0, exploitable remotely via the vehicletypeID parameter. Affected component: detail.asp; root cause: unsafely constructed SQL queries. Impact per NVD: partial confidentiality, integrity, and availability. A...