Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.5
CVSSv2

CVE-2014-10033

Published: 13/01/2015 Updated: 08/09/2017
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
VMScore: 655
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Subscribe to Oscommerce

Vulnerability Summary

SQL injection vulnerability in the update_zone function in catalog/admin/geo_zones.php in osCommerce Online Merchant 2.3.3.4 and previous versions allows remote administrators to execute arbitrary SQL commands via the zID parameter in a list action.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

oscommerce online merchant

Exploits

Exploit DB: osCommerce 2.3.3.4 - 'geo_zones.php?zID' SQL Injection
# Title: osCommerce v2x SQL Injection Vulnerability # Dork: Powered by osCommerce # Author: Ahmed Aboul-Ela # Contact: ahmedaboul3la[at]gmail[dot]com - twittercom/_secgeek # Vendor : wwwoscommercecom # Version: v2334 (current latest release) and prior versions should be affected too # References: wwwsecgeeknet/oscomm ...

References

CWE-89http://www.exploit-db.com/exploits/31515http://www.secgeek.net/oscommerce-v2x-sql-injection-vulnerability/http://osvdb.org/show/osvdb/103365https://github.com/gburton/oscommerce2/commit/e4d90eccd7d9072ebe78da4c38fb048bfe31c902https://exchange.xforce.ibmcloud.com/vulnerabilities/91113https://nvd.nist.govhttps://www.exploit-db.com/exploits/31515/
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21991CVE-2024-32674path traversalCVE-2023-21987denial of servicedosCVE-2024-4647CVE-2024-25519CVE-2024-33612
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook