| Package | Affected versions | Patched versions |
|---|---|---|
| net.commerce | = 2.0= 3.0= 3.1= 3.1.1= 3.1.2= 3.2 | |
| net.commerce hosting server | = 3.1.1= 3.1.2= 3.2 | |
| websphere commerce suite | = 3.1.2= 3.2= 4.1= 4.1.1 |
orderdspc.d2w macro in IBM Net.Commerce 3.x allows remote attackers to execute arbitrary SQL queries by inserting them into the order_rn option of the report capability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free