CVE-2015-2242

High

Published: 09/03/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute arbitrary SQL commands via the (1) termid or (2) nyelv_id parameter to index.php.

Risk Assessment

Attackers may gain access to the database, potentially leading to data theft or system compromise.

Recommendation

It is recommended to validate and sanitize input data and to update to the latest version of the software to minimize the risk of SQL injection.

Other vulnerabilities in Webshop hun 1.062S

CVE-2015-2243High
Directory traversal vulnerability in Webshop hun 1.062S allows remote attackers to have unspecified impact via directory traversal sequences in the mappa parameter to index.php.

Original NVD description (English source)

Multiple SQL injection vulnerabilities in Webshop hun 1.062S allow remote attackers to execute arbitrary SQL commands via the (1) termid or (2) nyelv_id parameter to index.php.