Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the (1) ts parameter to details.php and possibly the (2) ilceler parameter to index.php.
References
Configurations
Information
Published : 2011-09-27 03:55
Updated : 2017-08-28 18:29
NVD link : CVE-2010-4845
Mitre link : CVE-2010-4845
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
mhproducts
- projekt_shop