Sql injection

2012-02-0800:55:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.6%

JSON

SQL injection vulnerability in model/comment.class.php in HDWiki 5.0, 5.1, and possibly other versions allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to index.php. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
hdwikieq5.0
hdwikieq5.1

CPE	Name	Operator	Version
	hdwiki	eq	5.0
	hdwiki	eq	5.1

References

bbs.wolvez.org/viewtopic.php?id=208

secunia.com/advisories/47907

www.securityfocus.com/bid/51871