CVE-2011-5039 | BDVDB-2026-48653 Detail

Description#

Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters to login.php, (3) the filter parameter to widget.dokumenti_lista.php, and (4) the fin_nalog_id parameter to nalozi_naslov.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5065.php
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5064.php
http://www.exploit-db.com/exploits/18259
https://exchange.xforce.ibmcloud.com/vulnerabilities/71927

Exploit#

http://www.exploit-db.com/exploits/18259

History#

Version 12011-12-30Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.