CVE-2010-0691

Description

SQL injection vulnerability in druckansicht.php in JTL-Shop 2 allows remote attackers to execute arbitrary SQL commands via the s parameter.

Affected products

• JTL Software / JTL Shop2 – 2

References

• EXPLOIThttp://www.exploit-db.com/exploits/11445
• MISChttp://osvdb.org/62329
• VENDOR_ADVISORYhttp://secunia.com/advisories/38588