Sql injection

2008-07-2117:41:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.0%

JSON

Multiple SQL injection vulnerabilities in tplSoccerSite 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the opp parameter to tampereunited/opponent.php; or the id parameter to (2) index.php, (3) player.php, (4) matchdetails.php, or (5) additionalpage.php in tampereunited/.

CPENameOperatorVersion
tplsoccersiteeq1.0

CPE	Name	Operator	Version
	tplsoccersite	eq	1.0

References

secunia.com/advisories/31111

securityreason.com/securityalert/4018

tpl-design.com/index.php

www.securityfocus.com/bid/30260

www.vupen.com/english/advisories/2008/2121/references

exchange.xforce.ibmcloud.com/vulnerabilities/43849

www.exploit-db.com/exploits/6088