CVE-2010-1336

Multiple SQL injection vulnerabilities in INVOhost 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) newlanguage parameters to site.php, (3) search parameter to manuals.php, and (4) unspecified vectors to faq.php. NOTE: some of these details are obtained from third party information.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.19% chance of exploitation in the next 30 days, 66th percentile

Published

2010-04-09

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/11874

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/11874

References

• CVE Record
• NVD entry

Related

• CVE-2010-1335
• CVE-2010-1337
• CVE-2010-1327
• CVE-2010-1338
• CVE-2010-1320
• CVE-2010-1340