CVE-2011-10026 | Spreecommerce up to 0.49.x API Search search[instance_eval] code injection

A vulnerability, which was classified as critical, was found in Spreecommerce up to 0.49.x. This affects an unknown function of the component API Search. Executing manipulation of the argument search[instance_eval] can lead to code injection.

This vulnerability is tracked as CVE-2011-10026. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.