Description (CNA)
SQL injection vulnerability in user.php in Hi Web Wiesbaden Web 2.0 Social Network Freunde Community System allows remote attackers to execute arbitrary SQL commands via the id parameter in a showgallery action.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58583
- http://packetstormsecurity.org/1005-exploits/web20snfcs-sql.txt
- http://secunia.com/advisories/39761
- http://osvdb.org/64513
ADP enrichment
No English description supplied.