Unscored CVE-2010-1588 EUVD-2010-1614GHSA-qjvc-pwfr-p4rq

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earli…

Published Apr 28, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter.

References

shoppingcart-websess-sql-injection(55821) vdb-entry
61890 vdb-entry
20100120 Insufficient User Input Validation in VP-ASP 6.50 Demo Code mailing-list
38283 third-party-advisory