Description
SQL injection vulnerability in system/src/dispatcher.php in Dir2web 3.0 allows remote attackers to execute arbitrary SQL commands via the oid parameter in a homepage action to index.php.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Daniel Correa · textwebappsphp
https://www.exploit-db.com/exploits/37581
References (1)
Core 1
Core References
Exploit mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2012-08/0045.html
Scores
EPSS
0.0062
EPSS Percentile
70.0%
Details
CWE
CWE-89
Status
published
Products (1)
dir2web/dir2web
3.0
Published
Aug 12, 2012
Tracked Since
Feb 18, 2026