CVE-2016-10114 SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2.6.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via vectors involving categor...
CriticalCVSS 9.8
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2.6.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via vectors involving categorysearch and smartSearch.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| awebsupport aweb cart watching system for virtuemart | = 2.6.0 | No fix listed |
References
- 95293 vdb-entry
- github.com
- vel.joomla.org third-party-advisory
- 40973 exploit