Description (CNA)
SQL injection vulnerability in index.php in the Viso (Industry Book) 2.04 and 2.03 module for eXV2 allows remote attackers to execute arbitrary SQL commands via the kid parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://secunia.com/advisories/29389
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41216
- http://www.securityfocus.com/bid/28255
- https://www.exploit-db.com/exploits/5254
ADP enrichment
No English description supplied.