CVE-2010-1726

Description

SQL injection vulnerability in offers_buy.php in EC21 Clone 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

• alibabaclone / ec21_clone3.0 – 3.0

References

• MISChttp://www.securityfocus.com/bid/39832
• EXPLOIThttp://www.exploit-db.com/exploits/12459
• EXPLOIThttp://packetstormsecurity.org/1004-exploits/ec21clone-sql.txt
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/58266