NVD

Id
14135  
Name
CVE-2010-2686  
Description
Multiple SQL injection vulnerabilities in clientes.asp in the TopManage OLK module 1.91.30 for SAP allow remote attackers to execute arbitrary SQL commands via the (1) PriceFrom, (2) PriceTo, and (3) InvFrom parameters, as reachable from olk/c_p/searchCart.asp, and other unspecified vectors when performing an advanced search. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-07-12  
Modified Date
2011-10-17  
Seq
2010-2686  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
78219 14135 CVE-2010-2686 20100701 Re: SAP"s web module OLK SQL Injection vulnerability  View
78220 14135 CVE-2010-2686 20100629 SAP"s web module OLK SQL Injection vulnerability  View
78221 14135 CVE-2010-2686 41208  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39796 JVNDB-2010-005581 SAP 用の TopManage OLK モジュール内における SQL インジェクションの脆弱性 SAP 用の TopManage OLK モジュール内の clientes.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2010-2686 45266 CVE-2010-2686 14135 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005581.html 2010-07-12 2012-12-20 View