CVE Reference: CVE-2010-2042

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2010-2042

Description:
SQL injection vulnerability in search.php in ECShop 2.7.2 allows remote attackers to execute arbitrary SQL commands via the encode parameter. NOTE: some of these details are obtained from third party information.

CVE Status:
Candidate

References:

SAID
  Secunia Advisory: SA39930

MISC
  http://packetstormsecurity.org/1005-exploits/ecshopsearch-sql.txt
  http://www.exploit-db.com/exploits/12702

BID
  40338


Return to the previous page.