Unrated severityNVD Advisory· Published May 7, 2010· Updated Apr 29, 2026
CVE-2010-1857
CVE-2010-1857
Description
SQL injection vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the prod parameter in a products.details action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected products
1- cpe:2.3:a:realitymedias:repairshop2:1.9.023:-:trial:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- secunia.com/advisories/39043nvdVendor Advisory
- www.us-cert.gov/cas/techalerts/TA10-159B.htmlnvdUS Government Resource
- www.securityfocus.com/bid/38907nvd
News mentions
0No linked articles in our index yet.