CVE-2011-5235

SQL injection vulnerability in mnoGoSearch before 3.3.12 allows remote attackers to execute arbitrary SQL commands via the hostname in a hypertext link.

Published: Oct 25, 2012
Updated: Apr 13, 2023
CVE: CVE-2011-5235
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
mnogosearch / mnogosearch	3.2.20	3.2.20.x
mnogosearch / mnogosearch	3.3.6	3.3.6.x
mnogosearch / mnogosearch	3.2.19	3.2.19.x
mnogosearch / mnogosearch	3.2.23	3.2.23.x
mnogosearch / mnogosearch	3.2.26	3.2.26.x
mnogosearch / mnogosearch	3.2.25	3.2.25.x
mnogosearch / mnogosearch	3.3.8	3.3.8.x
mnogosearch / mnogosearch	3.2.15	3.2.15.x
mnogosearch / mnogosearch	3.3.7	3.3.7.x
mnogosearch / mnogosearch	3.2.16	3.2.16.x
mnogosearch / mnogosearch	3.3.1	3.3.1.x
mnogosearch / mnogosearch	3.3.5	3.3.5.x
mnogosearch / mnogosearch	3.2.10	3.2.10.x
mnogosearch / mnogosearch	3.1.20	3.1.20.x
mnogosearch / mnogosearch	3.2.42	3.2.42.x
mnogosearch / mnogosearch	3.2.21	3.2.21.x
mnogosearch / mnogosearch	3.3.0	3.3.0.x
mnogosearch / mnogosearch	3.2.13	3.2.13.x
mnogosearch / mnogosearch	-	3.3.11.x
mnogosearch / mnogosearch	3.2.18	3.2.18.x
mnogosearch / mnogosearch	3.2.17	3.2.17.x
mnogosearch / mnogosearch	3.3.4	3.3.4.x
mnogosearch / mnogosearch	3.3.3	3.3.3.x
mnogosearch / mnogosearch	3.3.9	3.3.9.x
mnogosearch / mnogosearch	3.1.19	3.1.19.x
mnogosearch / mnogosearch	3.2.22	3.2.22.x
mnogosearch / mnogosearch	3.2.24	3.2.24.x
mnogosearch / mnogosearch	3.3.2	3.3.2.x
mnogosearch / mnogosearch	3.2.14	3.2.14.x
mnogosearch / mnogosearch	3.3.10	3.3.10.x

Vulnerability Database

CVE-2011-5235