Vulnerabilities > Realitymedias > Repairshop2
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2010-05-07 | CVE-2010-1857 | SQL Injection vulnerability in Realitymedias Repairshop2 1.9.023 SQL injection vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the prod parameter in a products.details action. | 6.8 |
| 2010-05-07 | CVE-2010-1856 | Cross-Site Scripting vulnerability in Realitymedias Repairshop2 1.9.023 Cross-site scripting (XSS) vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic_quotes_gpc is disabled, allows remote attackers to inject arbitrary web script or HTML via the prod parameter in a products.details action. | 2.6 |