Sql injection

2014-01-2918:55:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.5%

JSON

SQL injection vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to execute arbitrary SQL commands via the displayid parameter.

CPENameOperatorVersion
xiboeq1.4.2

CPE	Name	Operator	Version
	xibo	eq	1.4.2

References

www.securityfocus.com/bid/62071

exchange.xforce.ibmcloud.com/vulnerabilities/86777

infosec42.blogspot.com/2013/08/exploit-xibo-digital-signage-sql.html