Vulnerabilities > Invohost

DATE CVE VULNERABILITY TITLE RISK
2010-04-09 CVE-2010-1336 SQL Injection vulnerability in Invohost 3.4
Multiple SQL injection vulnerabilities in INVOhost 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) newlanguage parameters to site.php, (3) search parameter to manuals.php, and (4) unspecified vectors to faq.php.
network
low complexity
invohost CWE-89
7.5