CVE-2010-1857
RepairShop2 1.9.023 Trial - SQL Injection via prod Parameter
Title source: llmDescription
SQL injection vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the prod parameter in a products.details action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/38907
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/39043
US Government Resource third-party-advisory
x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA10-159B.html
Scores
EPSS
0.0114
EPSS Percentile
63.2%
Details
CWE
CWE-89
Status
published
Products (1)
realitymedias/repairshop2
1.9.023
Published
May 07, 2010
Tracked Since
Feb 18, 2026