Sql injection

2008-05-1322:20:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

65.1%

JSON

Multiple SQL injection vulnerabilities in cpLinks 1.03, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) admin_username parameter (aka the username field) to admin/index.php and the (2) search_text and (3) search_category parameters to search.php. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
cplinkseq1.03

CPE	Name	Operator	Version
	cplinks	eq	1.03

References

secunia.com/advisories/30024

www.securityfocus.com/bid/29035

www.vupen.com/english/advisories/2008/1431/references

exchange.xforce.ibmcloud.com/vulnerabilities/42170

www.exploit-db.com/exploits/5538