Sql injection

2008-06-2512:36:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.0%

JSON

SQL injection vulnerability in the Trade module in Maxtrade AIO 1.3.23 allows remote attackers to execute arbitrary SQL commands via the categori parameter in a pocategorisell action to modules.php.

CPENameOperatorVersion
maxtrade_aoieq1.3.23

CPE	Name	Operator	Version
	maxtrade_aoi	eq	1.3.23

References

secunia.com/advisories/30722

www.securityfocus.com/bid/29799

exchange.xforce.ibmcloud.com/vulnerabilities/43203

www.exploit-db.com/exploits/5853