CVE-2014-9237

High

Published: 03/12/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in Proticaret E-Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via a tem:Code element in a SOAP request.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database and leakage of sensitive information.

Recommendation

It is recommended to update the software to the latest version and implement input validation for SOAP requests.

Other vulnerabilities in Proticaret E-Commerce 3.0

CVE-2026-3953High
CVE-2026-3953 describes improper neutralization of input during web page generation, leading to Cross-Site Scripting (XSS) vulnerabilities in Proticaret E-Commerce software. The issue affects versions from 5.0.0 before 6.0.1767.1383.

Original NVD description (English source)

SQL injection vulnerability in Proticaret E-Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via a tem:Code element in a SOAP request.