CVEvulnerability
CVE-2011-0510
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-01-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in cart.php in Advanced Webhost Billing System (AWBS) 2.9.2 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the oid parameter in an add_other action.
Affected configurations
• awbs advanced webhost billing system (<= 2.9.2)
• awbs advanced webhost billing system 2.0
• awbs advanced webhost billing system 2.0.1
• awbs advanced webhost billing system 2.0.2
• awbs advanced webhost billing system 2.0.3
• awbs advanced webhost billing system 2.0.4
• awbs advanced webhost billing system 2.0.5
• awbs advanced webhost billing system 2.0.6
• awbs advanced webhost billing system 2.1.0
• awbs advanced webhost billing system 2.1.1
• awbs advanced webhost billing system 2.1.2
• awbs advanced webhost billing system 2.2.0
• awbs advanced webhost billing system 2.2.1
• awbs advanced webhost billing system 2.2.2
• awbs advanced webhost billing system 2.2.3
• awbs advanced webhost billing system 2.3.0
• awbs advanced webhost billing system 2.3.1
• awbs advanced webhost billing system 2.3.2
• awbs advanced webhost billing system 2.3.3
• awbs advanced webhost billing system 2.4.0
• awbs advanced webhost billing system 2.4.1
• awbs advanced webhost billing system 2.5
• awbs advanced webhost billing system 2.5.0
• awbs advanced webhost billing system 2.5.1
• awbs advanced webhost billing system 2.6.0
• awbs advanced webhost billing system 2.6.1
• awbs advanced webhost billing system 2.6.2
• awbs advanced webhost billing system 2.6.3
• awbs advanced webhost billing system 2.7
• awbs advanced webhost billing system 2.7.0
• awbs advanced webhost billing system 2.7.1
• awbs advanced webhost billing system 2.7.2
• awbs advanced webhost billing system 2.7.3
• awbs advanced webhost billing system 2.7.4
• awbs advanced webhost billing system 2.7.5
• awbs advanced webhost billing system 2.8.0
• awbs advanced webhost billing system 2.8.1
• awbs advanced webhost billing system 2.8.2
• awbs advanced webhost billing system 2.8.3
• awbs advanced webhost billing system 2.8.4
• awbs advanced webhost billing system 2.8.5
• awbs advanced webhost billing system 2.9.0
• awbs advanced webhost billing system 2.9.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/42944 Vendor Advisory
- http://www.exploit-db.com/exploits/16003 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64726 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/42944 Vendor Advisory
- http://www.exploit-db.com/exploits/16003 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64726 exchange.xforce.ibmcloud.com