PT-2005-2234
CVE-2005-1221
·
تاريخ النشر
2005-04-22
·
تاريخ التحديث
2024-02-14
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
EcommPro version 3.0
Description
The issue allows remote attackers to execute arbitrary SQL commands via the
password field in the login.asp file. This can potentially lead to unauthorized access and data manipulation.Recommendations
For EcommPro version 3.0, consider validating and sanitizing user input in the
password field to prevent SQL injection attacks. As a temporary workaround, restrict access to the login.asp file until a proper fix is applied. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾