Sql injection

2009-01-0918:30:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.8%

JSON

SQL injection vulnerability in index.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
riotpixle0.61
riotpixeq0.51 beta
riotpixeq0.60
riotpixeq0.5
riotpixeq.05
riotpixeq0.52

Name	Operator	Version
riotpix	le	0.61
riotpix	eq	0.51 beta
riotpix	eq	0.60
riotpix	eq	0.5
riotpix	eq	.05
riotpix	eq	0.52

References

secunia.com/advisories/33395

securityreason.com/securityalert/4892

www.securityfocus.com/bid/33132

www.exploit-db.com/exploits/7682