Description
SQL injection vulnerability in track.php in Scripts For Sites (SFS) EZ BIZ PRO allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Hussin X · textwebappsphp
https://www.exploit-db.com/exploits/6910
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46280
Exploit, Third Party Advisory exploit
x_refsource_exploit-db
https://www.exploit-db.com/exploits/6910
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/32033
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/32552
Scores
EPSS
0.0041
EPSS Percentile
61.6%
Details
CWE
CWE-89
Status
published
Products (1)
scripts-for-sites/ez_biz_pro
Published
Feb 23, 2009
Tracked Since
Feb 18, 2026