Vulnerability Details CVE-2011-5039
Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters to login.php, (3) the filter parameter to widget.dokumenti_lista.php, and (4) the fin_nalog_id parameter to nalozi_naslov.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 64.8%
CVSS Severity
CVSS v2 Score 7.5
References
- http://www.exploit-db.com/exploits/18259
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5064.php
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5065.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71927
- http://www.exploit-db.com/exploits/18259
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5064.php
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5065.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71927
Products affected by CVE-2011-5039
-
cpe:2.3:a:infoproject:biznis_heroj:*