SQL Injection in Sharetronix

CVE-2013-5354

Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) fb_user_id or (2) tw_user_id parameter to signup.

Vulnerability class: SQL Injection

EPSS: 0.012 (65.7th percentile) — read the EPSS interpretation.

Affected products

Sharetronix — versions 3.1.1
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

PSIRT-CNA@flexerasoftware.com (x_refsource_OSVDB, vdb-entry)
PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_BID)
PSIRT-CNA@flexerasoftware.com (x_refsource_MISC, Vendor Advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)