Sql injection

2011-01-2019:00:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.8%

JSON

SQL injection vulnerability in cart.php in Advanced Webhost Billing System (AWBS) 2.9.2 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the oid parameter in an add_other action.

CPENameOperatorVersion
advanced_webhost_billing_systemeq2.7.5
advanced_webhost_billing_systemeq2.0.4
advanced_webhost_billing_systemeq2.1.0
advanced_webhost_billing_systemle2.9.2
advanced_webhost_billing_systemeq2.7.4
advanced_webhost_billing_systemeq2.8.2
advanced_webhost_billing_systemeq2.1.1
advanced_webhost_billing_systemeq2.7
advanced_webhost_billing_systemeq2.3.1
advanced_webhost_billing_systemeq2.6.1

Name	Operator	Version
advanced_webhost_billing_system	eq	2.7.5
advanced_webhost_billing_system	eq	2.0.4
advanced_webhost_billing_system	eq	2.1.0
advanced_webhost_billing_system	le	2.9.2
advanced_webhost_billing_system	eq	2.7.4
advanced_webhost_billing_system	eq	2.8.2
advanced_webhost_billing_system	eq	2.1.1
advanced_webhost_billing_system	eq	2.7
advanced_webhost_billing_system	eq	2.3.1
advanced_webhost_billing_system	eq	2.6.1