CVE-2010-1588

Description

SQL injection vulnerability in the Getwebsess function in shopsessionsubs.asp in Rocksalt International VP-ASP Shopping Cart 6.50 and earlier allows remote attackers to execute arbitrary SQL commands via the websess parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/55821

http://secunia.com/advisories/38283

http://osvdb.org/61890

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS