CVE-2015-2562

Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla!

published March 20, 2015

CVSS

—

EPSS

39%

Percentile

98.6

In the wild

Unconfirmed

What it is

Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) search_category_id, (2) sort_order, or (3) filter_manufacturer_ids in a displayproducts action to index.php.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.38721 · 98.6th percentile
Published: 2015-03-20T14:00Z

EPSS history

Timeline

20 MAR 14:00Z
Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla!
cvelistv5