Family: CGI abuses --> Category: attack
SquirrelCart SQL Injection Vulnerability Scan
Vulnerability Scan Summary
SQL Injection in Squirrelcart
Detailed Explanation for this Vulnerability Test
The remote web server contains a PHP application that is subject to
SQL injection attacks.
The remote host is running SquirrelCart, a shopping cart program
written in PHP.
There is a flaw in the remote software that may allow anyone to inject
arbitrary SQL commands, which may in turn be used to gain
administrative access on the remote host.
SquirrelCart 1.5.5 and prior versions are affected by this flaw.
See also :
Upgrade to SquirrelCart 1.6.0 or download a patch from
Medium / CVSS Base Score : 5
Click HERE for more information and discussions on this network vulnerability scan.