CVE-2011-5139

Preprojects Business Cards Designer - SQL Injection

Title source: rule
STIX 2.1

Description

SQL injection vulnerability in page.php in Pre Studio Business Cards Designer allows remote attackers to execute arbitrary SQL commands via the id parameter.

Exploits (1)

exploitdb STUB VERIFIED
by dr_zig · textwebappsasp
https://www.exploit-db.com/exploits/18009

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/76596
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/71972
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/46545
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/18009

Scores

EPSS 0.0106
EPSS Percentile 77.8%

Details

CWE
CWE-89
Status published
Products (1)
preprojects/business_cards_designer
Published Aug 31, 2012
Tracked Since Feb 18, 2026