Описание
SQL injection vulnerability in additional_images.php (aka the Additional Images module) before 1.14 in osCommerce allows remote attackers to execute arbitrary SQL commands via the products_id parameter to product_info.php.
Ссылки
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:oscommerce:oscommerce:1.1:*:*:*:*:*:*:*
cpe:2.3:a:oscommerce:oscommerce:1.11:*:*:*:*:*:*:*
cpe:2.3:a:oscommerce:oscommerce:1.12:*:*:*:*:*:*:*
cpe:2.3:a:oscommerce:oscommerce:1.13:*:*:*:*:*:*:*
EPSS
Процентиль: 74%
0.00816
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
SQL injection vulnerability in additional_images.php (aka the Additional Images module) before 1.14 in osCommerce allows remote attackers to execute arbitrary SQL commands via the products_id parameter to product_info.php.
EPSS
Процентиль: 74%
0.00816
Низкий
7.5 High
CVSS2
Дефекты
NVD-CWE-Other