Advanced Webhost Billing System (AWBS) 2.9.2 - 'oid' SQL Injection

EDB-ID:

35231

CVE:

N/A

Author:

ShivX

Type:

webapps

Platform:

PHP

Published:

2011-01-16

source: http://www.securityfocus.com/bid/45827/info

Advanced Webhost Billing System (AWBS) is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

AWBS 2.9.2 is vulnerable; other versions may also be affected. 

http://www.example.com/cart?ca=add_other&oid=1'%20AND%20SLEEP(100)='