PT-2023-9997 · Unknown · Sheilazpy Eshop

Sheilazpy · Publicado 2023-01-06 · Atualizado 2024-05-17 · CVE-2013-10008

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Média

Vetor base

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions sheilazpy eShop (affected versions not specified)

Description A critical issue has been found, leading to sql injection through the manipulation of an unknown function. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations Apply a patch to fix this issue. The patch is identified by the name e096c5849c4dc09e1074104531014a62a5413884.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2013-10008

Produtos afetados

Sheilazpy Eshop

Referências · 6

• https://vuldb.com/?ctiid.217572 · Nota
• https://vuldb.com/?id.217572 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-10008 · Nota de Segurança
• https://github.com/sheilazpy/eShop/commit/e096c5849c4dc09e1074104531014a62a5413884 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-10008 · Nota
• https://t.me/cibsecurity/56082 · Publicação no Telegram