CVE-2013-7192 in Dynamic Biz Website Builder Quickweb
Summary
Multiple SQL injection vulnerabilities in Dynamic Biz Website Builder (QuickWeb) allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to apps/news-events/newdetail.asp, or the (2) UserID or (3) Password to login.asp.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
12/20/2013
Disclosure
12/20/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 65847 | Etoshop Dynamic Biz Website Builder Quickweb Login sql injection | 89 | High | Unavailable | CVE-2013-7192 |