CVE-2013-5354

Sharetronix 3.1.1 - SQL Injection via fb_user_id or tw_user_id Parameter

Title source: llm
STIX 2.1

Description

Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) fb_user_id or (2) tw_user_id parameter to signup.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/100603
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/64102
Vendor Advisory x_refsource_misc
http://secunia.com/secunia_research/2013-10
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/53936

Scores

EPSS 0.0122
EPSS Percentile 65.6%

Details

CWE
CWE-89
Status published
Products (1)
sharetronix/sharetronix 3.1.1
Published Dec 09, 2013
Tracked Since Feb 18, 2026