NVD

Id
82327  
Name
CVE-2016-3694  
Description
Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, allow remote attackers to execute arbitrary SQL commands via the (1) orders_status or (2) customers_status parameter to api/easybill/easybillcsv.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-02-28  
Published
2017-02-15  
Modified Date
2017-02-23  
Seq
2016-3694  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
406349 82327 CVE-2016-6602 http://packetstormsecurity.com/files/138244/WebNMS-Framework-5.2-SP1-Traversal-Weak-Obfuscation-User-Impersonation.html  View
406350 82327 CVE-2016-6602 20160812 [CVE-2016-6600/1/2/3]: Multiple vulnerabilities (RCE, file download, etc) in WebNMS Framework 5.2 / 5.2 SP1  View
406351 82327 CVE-2016-6602 http://www.rapid7.com/db/modules/auxiliary/admin/http/webnms_cred_disclosure  View
406352 82327 CVE-2016-6602 20160808 [CVE-2016-6600/1/2/3]: Multiple vulnerabilities (RCE, file download, etc) in WebNMS Framework 5.2 / 5.2 SP1  View
406353 82327 CVE-2016-6602 92402  View
406354 82327 CVE-2016-6602 https://blogs.securiteam.com/index.php/archives/2712  View
406355 82327 CVE-2016-6602 https://forums.webnms.com/topic/recent-vulnerabilities-in-webnms-and-how-to-protect-the-server-against-them  View
406356 82327 CVE-2016-6602 https://github.com/pedrib/PoC/blob/master/advisories/webnms-5.2-sp1-pwn.txt  View
406357 82327 CVE-2016-6602 40229  View
406892 82327 CVE-2017-3281 1037639  View
406893 82327 CVE-2017-3281 1037639  View

Related JVN