Vulnerabilities > Invohost
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2010-04-09 | CVE-2010-1336 | SQL Injection vulnerability in Invohost 3.4 Multiple SQL injection vulnerabilities in INVOhost 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) newlanguage parameters to site.php, (3) search parameter to manuals.php, and (4) unspecified vectors to faq.php. | 7.5 |