Sql injection

2009-05-2916:30:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.2%

JSON

Multiple SQL injection vulnerabilities in admin/index.php in Submitter Script 2 allow remote attackers to execute arbitrary SQL commands via (1) the uNev parameter (aka the username field) or (2) the uJelszo parameter (aka the Password field).

CPENameOperatorVersion
submitterscripteq2

CPE	Name	Operator	Version
	submitterscript	eq	2

References

osvdb.org/54475

secunia.com/advisories/35088

www.securityfocus.com/bid/34970

www.vupen.com/english/advisories/2009/1327

exchange.xforce.ibmcloud.com/vulnerabilities/50552

www.exploit-db.com/exploits/8683