CVE-2010-1336
INVOhost 3.4 - SQL Injection via site.php id/newlanguage Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-1336. PoCs published by Andrés Gómez.
AI-analyzed exploit summary This is a writeup describing SQL injection vulnerabilities in INVOhost software, providing examples of vulnerable parameters and mitigation suggestions. No actual exploit code is included.
Description
Multiple SQL injection vulnerabilities in INVOhost 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) newlanguage parameters to site.php, (3) search parameter to manuals.php, and (4) unspecified vectors to faq.php. NOTE: some of these details are obtained from third party information.
Exploits (1)
This is a writeup describing SQL injection vulnerabilities in INVOhost software, providing examples of vulnerable parameters and mitigation suggestions. No actual exploit code is included.