Unscored severity · published Dec 20, 2013
CVE-2013-7189
Multiple SQL injection vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to execute arbitrary SQL commands via the cmbdomain parameter to (1)…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to execute arbitrary SQL commands via the cmbdomain parameter to (1) checktransferstatus.php, (2) checktransferstatusbck.php, or (3) additionalsettings.php; or (4) invno parameter to payinvoiceothers.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AU
Autohoster · Iscripts
2.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-7189
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-7189
osvdb.org
http://osvdb.org/101049
osvdb.org
http://osvdb.org/101050
osvdb.org
http://osvdb.org/101051
osvdb.org
http://osvdb.org/101053
seclists.org
http://seclists.org/fulldisclosure/2013/Dec/121
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/89816
More from Autohoster
–
CVE-2013-7190
Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitrary files via the (1) tmpid parameter to…