CVE-2010-2635

SQL injection vulnerability in IBM WebSphere Commerce 6.0 before 6.0.0.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified parameters to "Commerce Organization Admin Console JavaServer pages."

Score

CVSS 2.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2010-11-09

Last modified

2024-08-07

Weaknesses

CWE-89

Affected products

• Websphere Commerce (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ73130
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62951