CVE-2008-2903

SQL injection vulnerability in news.php in Advanced Webhost Billing System (AWBS) 2.3.3 through 2.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the viewnews parameter.

Link	Resource
http://www.securityfocus.com/bid/29721	Exploit
http://secunia.com/advisories/30646	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/43110
https://www.exploit-db.com/exploits/5823

Configuration 1

cpe:2.3:a:awbs:advanced_webhost_billing_system:2.7:*:*:*:*:*:*:* cpe:2.3:a:awbs:advanced_webhost_billing_system:2.7.1:*:*:*:*:*:*:* cpe:2.3:a:awbs:advanced_webhost_billing_system:2.3.3:*:*:*:*:*:*:* cpe:2.3:a:awbs:advanced_webhost_billing_system:2.6.3:*:*:*:*:*:*:* cpe:2.3:a:awbs:advanced_webhost_billing_system:2.5:*:*:*:*:*:*:*

---

Published : 2008-06-30 06:24

Updated : 2017-09-29 01:31

---

NVD link : CVE-2008-2903

Mitre link : CVE-2008-2903

No products.

CWE-89