logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2012-4070

Description

SQL injection vulnerability in system/src/dispatcher.php in Dir2web 3.0 allows remote attackers to execute arbitrary SQL commands via the oid parameter in a homepage action to index.php.


Affected Software


CPE Name Name Version
dir2web:dir2web dir2web 3.0

Related