CVE-2011-1064

SQL injection vulnerability in member/list.php in qibosoft Qi Bo CMS 7 allows remote attackers to execute arbitrary SQL commands via the aidDB[] parameter.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2011-02-23

Last modified

2024-08-06

Weaknesses

CWE-89

Affected products

• Qi Bo Cms (Qibosoft)

References

• http://bbs.wolvez.org/viewtopic.php?id=211
• http://secunia.com/advisories/43396
• http://www.securityfocus.com/bid/46445
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65485