Multiple EtoShop Products Login Parameters SQL Injection Vulnerabilities

Multiple EtoShop Products Login Parameters SQL Injection Vulnerabilities

Multiple EtoShop products are prone to SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

The following applications are vulnerable:

B2C StoreBuilder Designer 2.0
B2C Online Shop Creator 4.0
Webstore Creator 5.0
B2B Horizontal Marketplace Creator 2.0
B2B Forward Auction Creator 2.0
C2C Reverse Auction Creator 2.0
B2B Reverse Auction Creator 2.0
C2C Forward Auction Creator 2.0