NVD

Id
12859  
Name
CVE-2010-1327  
Description
Multiple SQL injection vulnerabilities in TornadoStore 1.4.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the marca parameter to precios.php3 or (2) the where parameter in a delivery_courier action to control/abm_list.php3.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-07-06  
Modified Date
2010-07-06  
Seq
2010-1327  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
70894 12859 CVE-2010-1327 http://www.bonsai-sec.com/en/research/vulnerabilities/tornadostore-multiple-sql-injection-0106.php  View
70895 12859 CVE-2010-1327 41233  View
70896 12859 CVE-2010-1327 tornadostore-precios-sql-injection(59950)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39595 JVNDB-2010-005380 TornadoStore における SQL インジェクションの脆弱性 TornadoStore には、SQL インジェクションの脆弱性が存在します。 CVE-2010-1327 43907 CVE-2010-1327 12859 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005380.html 2010-07-06 2012-12-20 View