Description (CNA)
Multiple SQL injection vulnerabilities in catalog.php in SMEWeb 1.4b and 1.4f allow remote attackers to execute arbitrary SQL commands via the (1) idp and (2) category parameters.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.exploit-db.com/exploits/5725
- http://secunia.com/advisories/30477
- http://www.securityfocus.com/archive/1/493130/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42811
- http://www.securityfocus.com/bid/29496
ADP enrichment
No English description supplied.