SQL Injection Vulnerability in JTL-Shop by JTL-Software
CVE-2010-0691

Currently unrated

Key Information:

Vendor

Jtl-software

Status
Jtl-shop
Vendor
CVE Published:
23 February 2010

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2010-0691?

A SQL injection vulnerability exists in the druckansicht.php file of JTL-Shop 2, allowing remote attackers to manipulate SQL queries by passing specially crafted parameters. This can lead to the execution of arbitrary SQL commands, potentially compromising the database and revealing sensitive information.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2010-0691 - Proof of Concept

References

http://www.exploit-db.com/exploits/11445
exploitx_refsource_EXPLOIT-DB
http://osvdb.org/62329
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/38588
third-party-advisoryx_refsource_SECUNIA

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.