high7.5
CVE-2011-5235
SQL injection vulnerability in mnoGoSearch before 3.3.12 allows remote attackers to execute arbitrary SQL commands via the hostname in a hypertext link.
Impact
SQL injection vulnerability in mnoGoSearch before 3.3.12 allows remote attackers to execute arbitrary SQL commands via the hostname in a hypertext link.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mnogosearch | Mnogosearch | through 3.3.11 Versions 3.1.19, 3.1.20, 3.2.10, 3.2.13, 3.2.14 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/47272
- http://www.mnogosearch.org/doc33/msearch-changelog.html#changelog-3-3-12
- http://www.osvdb.org/77949
- http://www.securityfocus.com/bid/51113
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71884
- http://secunia.com/advisories/47272
- http://www.mnogosearch.org/doc33/msearch-changelog.html#changelog-3-3-12
- http://www.osvdb.org/77949
- http://www.securityfocus.com/bid/51113
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71884