Description
Multiple SQL injection vulnerabilities in myEZshop Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) GroupsId and (2) ItemsId parameters in admin.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
- myezshop-admin-sql-injection(23844) vdb-entry
- 21997 vdb-entry
- 15965 vdb-entry
- 18086 third-party-advisory