Vulnerability Details CVE-2011-3340
SQL injection vulnerability in ATCOM Netvolution 2.5.8 ASP allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 81.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://census-labs.com/news/2011/10/03/netvolution-referer-SQLi/
- http://secunia.com/advisories/46255
- http://www.securityfocus.com/archive/1/519984/100/0/threaded
- http://census-labs.com/news/2011/10/03/netvolution-referer-SQLi/
- http://secunia.com/advisories/46255
- http://www.securityfocus.com/archive/1/519984/100/0/threaded
Products affected by CVE-2011-3340
-
cpe:2.3:a:atcom:netvolution:2.5.6