CVE:CVE-2010-4362
CNNVD:CNNVD-201012-009
MicroNetsoft RV Dealer Website中存在多个SQL注入漏洞。远程攻击者可以借助(1)向search.php文件传递的selStock参数以及(2)向showAlllistings.asp传递的orderBy参数执行任意SQL命令。
solution:Upgrade micronetsoft rv_dealer_website to a higher version than *