Skip to content

CVE-2011-1048 SQL injection vulnerability in product.php in MihanTools 1.33 allows remote attackers to execute arbitrary SQL commands via the id parameter.

HighCVSS 7.5 EPSS 0.99%
Published
Updated
Exploit status
No public exploit known

Description

SQL injection vulnerability in product.php in MihanTools 1.33 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

ProductAffected versionsFixed in
mihantools = 1.33 No fix listed

References

  • 70858 exploit vdb-entry
  • 43195 third-party-advisory vendor-advisory
  • 16143 exploit
  • 46287 exploit vdb-entry