Search vulnerabilities

Results 2

Export CSV
CVE-2008-2903

SQL injection vulnerability in news.php in Advanced Webhost Billing System (AWBS) 2.3.3 through 2.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the viewnews parameter.

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2011-0510

SQL injection vulnerability in cart.php in Advanced Webhost Billing System (AWBS) 2.9.2 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the oid parameter in an add_other action.

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors