CVE-2016-3694

CVE-2016-3694 affects modified eCommerce Shopsoftware 2.0.0.0 revision 9678. The vulnerability is a GET-based SQL injection: the parameters orders_status and customers_status passed to api/easybill/easybillcsv.php are not adequately filtered, enabling remote attackers to execute arbitrary SQL com...