Sql injection

2009-06-2214:30:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.8%

JSON

SQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

CPENameOperatorVersion
phpwebthingseq0.1
phpwebthingseq0.2
phpwebthingseq0.4
phpwebthingseq1.5.1
phpwebthingseq0.4.1
phpwebthingseq1.0
phpwebthingsle1.5.2
phpwebthingseq0.2.98
phpwebthingseq1.5.0
phpwebthingseq1.1.97

Name	Operator	Version
phpwebthings	eq	0.1
phpwebthings	eq	0.2
phpwebthings	eq	0.4
phpwebthings	eq	1.5.1
phpwebthings	eq	0.4.1
phpwebthings	eq	1.0
phpwebthings	le	1.5.2
phpwebthings	eq	0.2.98
phpwebthings	eq	1.5.0
phpwebthings	eq	1.1.97

Rows per page:

1-10 of 151

References

secunia.com/advisories/35396

www.securityfocus.com/bid/35336

exchange.xforce.ibmcloud.com/vulnerabilities/51094

www.exploit-db.com/exploits/8939