Sql injection

2008-04-1822:05:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.7%

JSON

SQL injection vulnerability in viewcat.php in XplodPHP AutoTutorials 2.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.

CPENameOperatorVersion
autotutorialseq2.1 7daytriallicense
autotutorialseq2.1

CPE	Name	Operator	Version
	autotutorials	eq	2.1 7daytriallicense
	autotutorials	eq	2.1

References

secunia.com/advisories/29840

www.securityfocus.com/bid/28808

www.vupen.com/english/advisories/2008/1244/references

exchange.xforce.ibmcloud.com/vulnerabilities/41855

www.exploit-db.com/exploits/5457