CVE-2015-4713 SQL injection vulnerability in ApPHP Hotel Site 3.x.x allows remote editors to execute arbitrary SQL commands via the pid parameter to index.php.
MediumCVSS 6.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in ApPHP Hotel Site 3.x.x allows remote editors to execute arbitrary SQL commands via the pid parameter to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apphp hotel site | = 3.0.9 | No fix listed |
| apphp hotel site | = 3.1.3 | No fix listed |
| apphp hotel site | = 3.2.4 | No fix listed |
| apphp hotel site | = 3.3.0 | No fix listed |
| apphp hotel site | = 3.4.4 | No fix listed |
| apphp hotel site | = 3.5.1 | No fix listed |
| apphp hotel site | = 3.6.1 | No fix listed |
| apphp hotel site | = 3.7.5 | No fix listed |
| apphp hotel site | = 3.8.4 | No fix listed |
| apphp hotel site | = 3.9.1 | No fix listed |
References
- packetstormsecurity.com exploit
- 75390 vdb-entry