CVE-2010-0691: SQL Injection
Published Feb 23, 2010
·Updated
SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands via the s parameter.
Affected Software
1 affected component
Jtl-software Jtl-shop=2
Event History
Feb 23, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0691?
The severity of CVE-2010-0691 is high, with a score of 7.5 according to the CVSS system.
2
How do I fix CVE-2010-0691?
To fix CVE-2010-0691, you should apply the latest patches provided by JTL-Shop or implement input validation to prevent SQL injection.
3
What types of attacks are possible with CVE-2010-0691?
CVE-2010-0691 allows remote attackers to execute arbitrary SQL commands, which can lead to data leakage or database manipulation.
4
Which software is affected by CVE-2010-0691?
CVE-2010-0691 affects JTL-Shop version 2.
5
What is the main cause of the vulnerability identified in CVE-2010-0691?
The main cause of CVE-2010-0691 is insufficient input validation in the druckansicht.php file, which allows for SQL injection attacks.