Unscored severity · published Dec 30, 2011
CVE-2011-5039
Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters to…
–
CVSS
1%
EPSS
No
On KEV
Description
Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters to login.php, (3) the filter parameter to widget.dokumenti_lista.php, and (4) the fin_nalog_id parameter to nalozi_naslov.php.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BH
Biznis Heroj · Infoproject
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-5039
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-5039
Exploit
http://www.exploit-db.com/exploits/18259
Exploit
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5064.php
www.zeroscience.mk
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2011-5065.php
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/71927
More from Biznis Heroj
–
CVE-2011-5040
Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitrary web script or HTML via the config parameter to (1)…