CVEvulnerability
CVE-2011-5039
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-12-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters to login.php, (3) the filter parameter to widget.dokumenti_lista.php, and (4) the fin_nalog_id parameter to nalozi_naslov.php.
Affected configurations
• infoproject biznis heroj
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://www.exploit-db.com/exploits/18259 Exploit
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5064.php Exploit
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5065.php www.zeroscience.mk
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71927 exchange.xforce.ibmcloud.com
- http://www.exploit-db.com/exploits/18259 Exploit
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5064.php Exploit
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5065.php www.zeroscience.mk
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71927 exchange.xforce.ibmcloud.com