Sql injection

2008-08-1219:41:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.3%

JSON

Multiple SQL injection vulnerabilities in psipuss 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the Cid parameter to categories.php or (2) the Username parameter to login.php.

CPENameOperatorVersion
psipusseq1.0

CPE	Name	Operator	Version
	psipuss	eq	1.0

References

osvdb.org/35500

secunia.com/advisories/25041/

securityreason.com/securityalert/4140

www.securityfocus.com/bid/30629

exchange.xforce.ibmcloud.com/vulnerabilities/44367

www.exploit-db.com/exploits/6226