CVE-2009-1622: SQL Injection
Published May 12, 2009
·Updated
SQL injection vulnerability in user.php in EcShop 2.5.0 allows remote attackers to execute arbitrary SQL commands via the ordersn parameter in an orderquery action.
Affected Software
1 affected component
ECShop EcShop=2.5.0
Event History
May 12, 2009
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1622?
CVE-2009-1622 is considered a critical vulnerability due to its potential for remote SQL injection attacks.
2
How do I fix CVE-2009-1622?
To fix CVE-2009-1622, upgrade to the latest version of EcShop that addresses the SQL injection vulnerability.
3
What systems are affected by CVE-2009-1622?
CVE-2009-1622 specifically affects EcShop version 2.5.0.
4
What type of vulnerability is CVE-2009-1622?
CVE-2009-1622 is classified as an SQL injection vulnerability.
5
Can CVE-2009-1622 be exploited remotely?
Yes, CVE-2009-1622 can be exploited remotely by attackers through crafted inputs.