high7.5Public exploit code
CVE-2013-7192
Multiple SQL injection vulnerabilities in Dynamic Biz Website Builder (QuickWeb) allow remote attackers to execute arbitrary SQL commands via the (1) id parame…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Dynamic Biz Website Builder 'QuickWeb' 1.0 - '/login.asp' Multiple Field SQL Injections / Authentication Bypass2013-12-13 · webapps · asp · Verified
- Dynamic Biz Website Builder (QuickWeb) 1.0 - '/apps/news-events/newdetail.asp?id' SQL Injection2013-12-13 · webapps · asp · Verified
Impact
Multiple SQL injection vulnerabilities in Dynamic Biz Website Builder (QuickWeb) allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to apps/news-events/newdetail.asp, or the (2) UserID or (3) Password to login.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Etoshop | Dynamic Biz Website Builder Quickweb | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/124451
- http://www.securityfocus.com/bid/64371
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89844
- http://packetstormsecurity.com/files/124451
- http://www.securityfocus.com/bid/64371
- https://exchange.xforce.ibmcloud.com/vulnerabilities/89844