Awbs » Advanced Webhost Billing System » 2.6.3 : Security Vulnerabilities, CVEs,
SQL injection vulnerability in cart.php in Advanced Webhost Billing System (AWBS) 2.9.2 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the oid parameter in an add_other action.
Max CVSS
7.5
EPSS Score
0.06%
Published
2011-01-20
Updated
2017-08-17
SQL injection vulnerability in news.php in Advanced Webhost Billing System (AWBS) 2.3.3 through 2.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the viewnews parameter.
Max CVSS
6.8
EPSS Score
0.09%
Published
2008-06-30
Updated
2017-09-29
2 vulnerabilities found