Summary
Free Hosting Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
An attacker can exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Free Hosting Manager 2.0 is vulnerable
other versions may also
be affected.
References
Updated on 2015-03-25
Severity
Classification
-
CVSS Base Score: 9.0
AV:N/AC:L/Au:N/C:C/I:P/A:P
Related Vulnerabilities
- AlienVault Open Source SIEM (OSSIM) 'timestamp' Parameter Directory Traversal Vulnerability
- ASUS RT56U Router Multiple Vulnerabilities
- 68designs 68kb Multiple Remote File Include Vulnerabilities
- Apache Tomcat Windows Installer Privilege Escalation Vulnerability
- AproxEngine Multiple Remote Input Validation Vulnerabilities