VULNERABILITY INTELLIGENCE
CVE-2010-4362
CVSS score7.5 NONE
EPSS probability0.96%
CISA KEVNot currently listed
Published2010-12-01
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the (1) selStock parameter to search.asp and the (2) orderBy parameter to showAlllistings.asp.
Weakness classification
- nvd@nist.gov: CWE-89
Primary references
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Exploit
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit
- af854a3a-2127-422b-91ae-364da2661108