Sql injection

2008-10-2101:18:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.5%

JSON

SQL injection vulnerability in Meeting Room Booking System (MRBS) before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to (1) month.php, and possibly (2) day.php and (3) week.php.

CPENameOperatorVersion
mrbseq0.8 pre3
mrbseq0.8 pre4
mrbseq1.2.1
mrbseq1.2.6.1
mrbsle1.2.6
mrbseq1.2.4
mrbseq1.1
mrbseq1.2.5
mrbseq1.2
mrbseq0.8 pre2

Name	Operator	Version
mrbs	eq	0.8 pre3
mrbs	eq	0.8 pre4
mrbs	eq	1.2.1
mrbs	eq	1.2.6.1
mrbs	le	1.2.6
mrbs	eq	1.2.4
mrbs	eq	1.1
mrbs	eq	1.2.5
mrbs	eq	1.2
mrbs	eq	0.8 pre2

Rows per page:

1-10 of 311

References

securityreason.com/securityalert/4450

www.securityfocus.com/bid/31809

www.vupen.com/english/advisories/2008/2865

exchange.xforce.ibmcloud.com/vulnerabilities/45972

www.exploit-db.com/exploits/6781