high7.5Public exploit code
CVE-2011-0516
SQL injection vulnerability in mainx_a.php in E-PROMPT C BetMore Site Suite 4.0 through 4.2.0 allows remote attackers to execute arbitrary SQL commands via the…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BetMore Site Suite 4 - 'bid' Blind SQL Injection2011-01-16 · webapps · php
Impact
SQL injection vulnerability in mainx_a.php in E-PROMPT C BetMore Site Suite 4.0 through 4.2.0 allows remote attackers to execute arbitrary SQL commands via the bid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Epromptc | Betmore Site Suite | Versions 4.0, 4.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://epromptc.com/media/nwsatcl/betmore-4-2-1-software-update.html
- http://secunia.com/advisories/42945
- http://www.exploit-db.com/exploits/15999
- http://www.securityfocus.com/bid/45820
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64724
- http://epromptc.com/media/nwsatcl/betmore-4-2-1-software-update.html
- http://secunia.com/advisories/42945
- http://www.exploit-db.com/exploits/15999
- http://www.securityfocus.com/bid/45820
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64724