Sql injection

2010-07-0822:30:00

PRIOn knowledge base

www.prio-n.com

9 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.3%

JSON

SQL injection vulnerability in profile_view.php in Devana 1.6.6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

CPENameOperatorVersion
devanaeq1.0
devanaeq1.3.3
devanaeq1.4.3
devanaeq1.1.1
devanaeq1.5.3
devanale1.6.6
devanaeq1.2.4

Name	Operator	Version
devana	eq	1.0
devana	eq	1.3.3
devana	eq	1.4.3
devana	eq	1.1.1
devana	eq	1.5.3
devana	le	1.6.6
devana	eq	1.2.4

References

osvdb.org/63278

packetstormsecurity.org/1003-exploits/devana-sql.txt

secunia.com/advisories/39121

www.exploit-db.com/exploits/11922