CVE-2010-5036 - SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter

HIGH

SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter

Published Nov 2, 2011

7.5

HIGH

CVSS 2.0

EPSS 1.15%

SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://packetstormsecurity.org/1006-exploits/iscriptsewap-sqlxss.txt		x_refsource_MISCExploit
http://securityreason.com/securityalert/8522		third-party-advisoryx_refsource_SREASON
http://www.exploit-db.com/exploits/13740/		exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/40597		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2010/1360		vdb-entryx_refsource_VUPENVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-5000		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/59147		vdb-entryx_refsource_XF