Sql injection

2008-02-1202:00:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.8%

JSON

SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL commands via the username parameter in a lost_password_go action.

CPENameOperatorVersion
multi_hosteq3.0

CPE	Name	Operator	Version
	multi_host	eq	3.0

References

secunia.com/advisories/28803

www.securityfocus.com/bid/27651

exchange.xforce.ibmcloud.com/vulnerabilities/40289

www.exploit-db.com/exploits/5074