PT-2023-9997 · Unknown · Sheilazpy Eshop

Sheilazpy · Published 2023-01-06 · Updated 2024-05-17 · CVE-2013-10008

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Medium

Base vector

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions sheilazpy eShop (affected versions not specified)

Description A critical issue has been found, leading to sql injection through the manipulation of an unknown function. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations Apply a patch to fix this issue. The patch is identified by the name e096c5849c4dc09e1074104531014a62a5413884.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2013-10008

Affected Products

Sheilazpy Eshop

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2013-10008 · Security Note
• https://github.com/sheilazpy/eShop/commit/e096c5849c4dc09e1074104531014a62a5413884 · Patch
• https://vuldb.com/?ctiid.217572 · Note
• https://vuldb.com/?id.217572 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-10008 · Note
• https://t.me/cibsecurity/56082 · Telegram Post