CVE-2011-0516

EPSS 1.0%

SQL injection vulnerability in mainx_a.php in E-PROMPT C BetMore Site Suite 4.0 through 4.2.0 allows remote attackers to execute arbitrary SQL commands via the bid parameter.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/15999unverified exploitdbwww.exploit-db.com/exploits/15999unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://epromptc.com/media/nwsatcl/betmore-4-2-1-software-update.html http://secunia.com/advisories/42945 https://exchange.xforce.ibmcloud.com/vulnerabilities/64724 http://www.exploit-db.com/exploits/15999 http://www.securityfocus.com/bid/45820