CVE-2013-7189 | BDVDB-2026-59012 Detail

Description#

Multiple SQL injection vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to execute arbitrary SQL commands via the cmbdomain parameter to (1) checktransferstatus.php, (2) checktransferstatusbck.php, or (3) additionalsettings.php; or (4) invno parameter to payinvoiceothers.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/101049
https://exchange.xforce.ibmcloud.com/vulnerabilities/89816
http://seclists.org/fulldisclosure/2013/Dec/121
http://osvdb.org/101050
http://osvdb.org/101051
http://osvdb.org/101053

Exploit#

No public exploit known

History#

Version 12013-12-20Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.