Description
SQL injection vulnerability in intouch.lib.php in inTouch 0.5.1 Alpha allows remote attackers to execute arbitrary SQL commands via the user parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Aliaksandr Hartsuyeu · textwebappsphp
https://www.exploit-db.com/exploits/27003
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/420672/100/0/threaded
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/16110
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/0026
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/23954
Exploit, Vendor Advisory x_refsource_misc
http://evuln.com/vulns/8/summary.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/22382
Scores
EPSS
0.0136
EPSS Percentile
80.3%
Details
Status
published
Products (1)
intouch/intouch
0.5.1_alpha
Published
Jan 05, 2006
Tracked Since
Feb 18, 2026