CVE-2010-4849: Alibabaclone Alibaba Clone b2b

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

SQL injection vulnerability in countrydetails.php in Alibaba Clone B2B 3.4 allows remote attackers to execute arbitrary SQL commands via the es_id parameter.

Affected products

• Alibabaclone Alibaba Clone b2b: version 3.4 only

Published 2011-09-27. Last modified 2026-06-16.