SQL Injection in Webhost-Panel Bankoi Webhosting Control Panel

CVE-2008-6950

Multiple SQL injection vulnerabilities in login.asp in Bankoi WebHosting Control Panel 1.20 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field.

Vulnerability class: SQL Injection

EPSS: 0.010 (58.2th percentile) — read the EPSS interpretation.

Affected products

Webhost-panel Bankoi_webhosting_control_panel — versions 1.20
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)