CVE-2010-1336

EPSS 1.2%

Multiple SQL injection vulnerabilities in INVOhost 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) newlanguage parameters to site.php, (3) search parameter to manuals.php, and (4) unspecified vectors to faq.php. NOTE: some of these details are obtained from third party information.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/11874unverified exploitdbwww.exploit-db.com/exploits/11874unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/63157 http://osvdb.org/63158 http://secunia.com/advisories/39095 https://exchange.xforce.ibmcloud.com/vulnerabilities/57161 https://exchange.xforce.ibmcloud.com/vulnerabilities/57162 http://www.exploit-db.com/exploits/11874 http://www.securityfocus.com/bid/38962