CVE-2011-0510

SQL injection vulnerability in cart.php in Advanced Webhost Billing System (AWBS) 2.9.2 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the oid parameter in an add_other action.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.04% chance of exploitation in the next 30 days, 80th percentile

Published

2011-01-20

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/16003

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/16003

References

• CVE Record
• NVD entry

Related

• CVE-2011-0507
• CVE-2011-0511
• CVE-2011-0506
• CVE-2011-0512
• CVE-2011-0505
• CVE-2011-0513