SQL Injection in Micronetsoft Rv Dealer Website
CVE-2010-4362
Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the (1) selStock parameter to search.asp and the (2) orderBy parameter to showAlllistings.asp.
Vulnerability class: SQL Injection
EPSS: 0.010 (58.6th percentile) — read the EPSS interpretation.
Affected products
- Micronetsoft Rv_dealer_website
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)