{"id":"CVE-2010-4362","aliases":["EUVD-2010-4331","GHSA-2pmv-p43r-3vvm"],"status":"published","title":"Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers...","description":"Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the (1) selStock parameter to search.asp and the (2) orderBy parameter to showAlllistings.asp.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00961,"percentile":0.62041,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-89"],"published":"2010-12-01T16:00:00Z","modified":"2026-06-16T23:24:38Z","exploits":[{"source":"exploitdb","id":"EDB-15629","title":"MicroNetSoft RV Dealer Website - 'search.asp' / showAlllistings.asp' SQL Injection","type":"webapps","platform":"asp","date":"2010-11-29","verified":true,"url":"https://www.exploit-db.com/exploits/15629"}],"products":[{"vendor":"micronetsoft","product":"rv_dealer_website"}],"references":[{"url":"http://www.exploit-db.com/exploits/15629","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/bid/45089","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/41319","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-4362"},{"url":"https://github.com/advisories/GHSA-2pmv-p43r-3vvm"}],"sources":{"cve":[{"id":"CVE-2010-4362","description":"Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the (1) selStock parameter to search.asp and the (2) orderBy parameter to showAlllistings.asp.","status":"published","published":"2010-12-01T16:00:00Z","modified":"2024-08-07T03:43:14.741Z","updated_at":"2026-11-02T14:33:28.50039Z"}],"euvd":[{"id":"EUVD-2010-4331","description":"Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the (1) selStock parameter to search.asp and the (2) orderBy parameter to showAlllistings.asp.","status":"published","published":"2010-12-01T16:00:00Z","modified":"2024-08-07T03:43:14Z","updated_at":"2026-11-03T01:39:30.501544Z"}],"ghsa":[{"id":"GHSA-2pmv-p43r-3vvm","title":"Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers...","description":"Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the (1) selStock parameter to search.asp and the (2) orderBy parameter to showAlllistings.asp.","status":"published","published":"2022-05-17T05:42:05Z","modified":"2023-01-28T05:04:16Z","cwes":["CWE-89"],"updated_at":"2026-11-02T14:44:08.629318Z"}],"nvd":[{"id":"CVE-2010-4362","description":"Multiple SQL injection vulnerabilities in MicroNetsoft RV Dealer Website allow remote attackers to execute arbitrary SQL commands via the (1) selStock parameter to search.asp and the (2) orderBy parameter to showAlllistings.asp.","status":"published","published":"2010-12-01T16:06:13.723Z","modified":"2026-06-16T23:24:38.51Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:02:00.37682Z"}]}}