← back
CVE-2016-3694

CVE-2016-3694

EPSS 3.7%
Multiple SQL injection vulnerabilities in modified eCommerce Shopsoftware 2.0.0.0 revision 9678, when the easybill-module is not installed, allow remote attackers to execute arbitrary SQL commands via the (1) orders_status or (2) customers_status parameter to api/easybill/easybillcsv.php.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencepacketstormsecurity.com/files/136734/modified-eCommerce-2.0.0.0-Rev-9678-SQL-Injection.htmlunverifiedcve_referencewww.exploit-db.com/exploits/39710/unverifiedexploitdbwww.exploit-db.com/exploits/39710unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/136734/modified-eCommerce-2.0.0.0-Rev-9678-SQL-Injection.htmlhttps://www.exploit-db.com/exploits/39710/