e107 EasyShop plugin easyshop.php SQL Injection Vulnerability

  1. Network Vulnerabilities
  2. Web application abuses
  3. e107 EasyShop plugin easyshop.php SQL Injection Vulnerability
Summary
This host is running e107 and is prone to SQL injection vulnerability.
Impact
Successful exploitation could allow remote attackers to execute arbitrary SQL commands. Impact Level: Application
Solution
Upgrade to e107 version 0.7.22 or later, For updates refer to http://e107.org/edownload.php
Insight
The flaw exists due to easyshop.php file in the EasyShop plugin, which can be exploited to conduct SQL injection by using execute commands via the category_id parameter.
Affected
e107 version 0.7.13, EasyShop Plugin.
References
Updated on 2017-03-28
Severity
High Severity
Classification
Related Vulnerabilities