CVEvulnerability
CVE-2010-1336
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-04-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in INVOhost 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) newlanguage parameters to site.php, (3) search parameter to manuals.php, and (4) unspecified vectors to faq.php. NOTE: some of these details are obtained from third party information.
Affected configurations
• invohost invohost 3.4
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/63157 osvdb.org
- http://osvdb.org/63158 osvdb.org
- http://secunia.com/advisories/39095 Vendor Advisory
- http://www.exploit-db.com/exploits/11874 Exploit
- http://www.securityfocus.com/bid/38962 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57161 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57162 exchange.xforce.ibmcloud.com
- http://osvdb.org/63157 osvdb.org
- http://osvdb.org/63158 osvdb.org
- http://secunia.com/advisories/39095 Vendor Advisory
- http://www.exploit-db.com/exploits/11874 Exploit
- http://www.securityfocus.com/bid/38962 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57161 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57162 exchange.xforce.ibmcloud.com