Sql injection

2007-07-3017:30:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.4%

JSON

Multiple SQL injection vulnerabilities in Webyapar 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the kat_id parameter to the default URI in a download action or (2) the id parameter to the default URI in a duyurular_detay action.

CPENameOperatorVersion
webyapareq2.0

CPE	Name	Operator	Version
	webyapar	eq	2.0

References

osvdb.org/37131

osvdb.org/37132

www.securityfocus.com/bid/25061

exchange.xforce.ibmcloud.com/vulnerabilities/35603

www.exploit-db.com/exploits/4224