Sql injection

2009-06-1821:30:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.8%

JSON

Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) ids parameter to admin.php, the (2) y parameter to members.php, and other unspecified vectors. NOTE: vector 1 requires administrative access.

CPENameOperatorVersion
tekbase_all-in-oneeq3.1

CPE	Name	Operator	Version
	tekbase_all-in-one	eq	3.1

References

osvdb.org/55190

osvdb.org/55191

secunia.com/advisories/35481

www.exploit-db.com/exploits/8977