CVE-2012-5294

EPSS 1.1%

SQL injection vulnerability in art_detalle.php in MyStore Xpress Tienda Virtual allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/18302unverified exploitdbwww.exploit-db.com/exploits/36486unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://1337day.com/exploits/17325 https://exchange.xforce.ibmcloud.com/vulnerabilities/72067 http://www.exploit-db.com/exploits/18302 http://www.securityfocus.com/bid/51240