CVE-2016-10755

AbanteCart 1.2.8 allows SQL Injection via the source_language parameter to admin/controller/pages/localisation/language.php and core/lib/language_manager.php, or via POST data to admin/controller/pages/tool/backup.php and admin/model/tool/backup.php.

• CWE-89

• https://blog.ripstech.com/2016/abantecart-multiple-sql-injections/Third Party Advisory
• https://demo.ripstech.com/projects/abantecart_1.2.8Third Party Advisory
• https://blog.ripstech.com/2016/abantecart-multiple-sql-injections/Third Party Advisory
• https://demo.ripstech.com/projects/abantecart_1.2.8Third Party Advisory

Published

May 24, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-1075Use-after-free vulnerability in Adobe Reader and Acrobat bef…
• CVE-2016-10750In Hazelcast before 3.11, the cluster join procedure is vuln…
• CVE-2016-10751osClass 3.6.1 allows oc-admin/plugins.php Directory Traversa…
• CVE-2016-10752serendipity_moveMediaDirectory in Serendipity 2.0.3 allows r…
• CVE-2016-10753e107 2.1.2 allows PHP Object Injection with resultant SQL in…
• CVE-2016-10754modules/Calendar/Activity.php in Vtiger CRM 6.5.0 allows SQL…
• CVE-2016-10756Kliqqi 3.0.0.5 allows CSRF with resultant Arbitrary File Upl…
• CVE-2016-10757In Redaxo 5.2.0, the cron management of the admin panel suff…
• CVE-2016-10758PHPKIT 1.6.6 allows arbitrary File Upload, as demonstrated b…
• CVE-2016-10759The Xinha plugin in Precurio 2.1 allows Directory Traversal,…
• CVE-2016-1076Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat…
• CVE-2016-10760On Seowon Intech routers, there is a Command Injection vulne…