CVE-2010-4919

SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbitrary SQL commands via the vehicletypeID parameter.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2011-10-08

Last modified

2024-08-07

Weaknesses

CWE-89

Affected products

• Rv Dealer Website (Micronetsoft)

References

• http://secunia.com/advisories/41319
• http://www.exploit-db.com/exploits/14914
• https://exchange.xforce.ibmcloud.com/vulnerabilities/61611