CVE-2011-5183 Multiple SQL injection vulnerabilities in OrderSys 1.6.4 and earlier allow remote attackers to execute arbitrary SQL commands via the where_clause parameter to (1) index.php, (2) index_long.php, or (3...
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in OrderSys 1.6.4 and earlier allow remote attackers to execute arbitrary SQL commands via the where_clause parameter to (1) index.php, (2) index_long.php, or (3) index_short.php in ordering/interface_creator/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bioinformatics ordersys | <= 1.6.3 | No fix listed |
| bioinformatics ordersys | = 1.5.5 | No fix listed |
| bioinformatics ordersys | = 1.5.6 | No fix listed |
| bioinformatics ordersys | = 1.6 | No fix listed |
| bioinformatics ordersys | = 1.6.1 | No fix listed |
| bioinformatics ordersys | = 1.6.2 | No fix listed |
References
- www.bioinformatics.org
- 18091 exploit