Sql injection

2009-01-0918:30:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.8%

JSON

SQL injection vulnerability in read.php in RiotPix 0.61 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter.

CPENameOperatorVersion
riotpixle0.61
riotpixeq0.51 beta
riotpixeq0.60
riotpixeq0.5
riotpixeq.05
riotpixeq0.52

Name	Operator	Version
riotpix	le	0.61
riotpix	eq	0.51 beta
riotpix	eq	0.60
riotpix	eq	0.5
riotpix	eq	.05
riotpix	eq	0.52

References

secunia.com/advisories/33395

securityreason.com/securityalert/4893

www.securityfocus.com/bid/33129

www.exploit-db.com/exploits/7679