NVD

Id
15879  
Name
CVE-2010-4632  
Description
Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the (1) article parameter to kb.asp, (2) specific parameter to cart.asp, (3) countrycode parameter to contact.asp, and the (4) srch parameter to search.asp. NOTE: the article parameter to pilot.asp is already covered by CVE-2008-2688.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-12-30  
Modified Date
2010-12-31  
Seq
2010-4632  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
89971 15879 CVE-2010-4632 http://advisories.ariko-security.com/november/audyt_bezpieczenstwa_745.html  View
89972 15879 CVE-2010-4632 20101107 ASPilot Pilot Cart 7.3 multiple vulnerabilities  View
89973 15879 CVE-2010-4632 http://packetstormsecurity.org/1011-exploits/aspilotpilotcart-sqlxssinject.txt  View
89974 15879 CVE-2010-4632 15448  View
89975 15879 CVE-2010-4632 44698  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37783 JVNDB-2010-003568 ASPilot Pilot Cart における SQL インジェクションの脆弱性 ASPilot Pilot Cart には、SQL インジェクションの脆弱性が存在します。 CVE-2010-4632 47212 CVE-2010-4632 15879 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003568.html 2010-12-30 2012-03-27 View