Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qjvc-pwfr-p4rq

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter.

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter.

EPSS

Процентиль: 58%
0.00372
Низкий

Дефекты

CWE-89

Связанные уязвимости

nvd
почти 16 лет назад

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter.

EPSS

Процентиль: 58%
0.00372
Низкий

Дефекты

CWE-89