CVE-2011-5235

EUVD-2011-5135
SQL injection vulnerability in mnoGoSearch before 3.3.12 allows remote attackers to execute arbitrary SQL commands via the hostname in a hypertext link.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
Affected Products (NVD)
VendorProductVersion
mnogosearchmnogosearch
𝑥
≤ 3.3.11
mnogosearchmnogosearch
3.1.19
mnogosearchmnogosearch
3.1.20
mnogosearchmnogosearch
3.2.10
mnogosearchmnogosearch
3.2.13
mnogosearchmnogosearch
3.2.14
mnogosearchmnogosearch
3.2.15
mnogosearchmnogosearch
3.2.16
mnogosearchmnogosearch
3.2.17
mnogosearchmnogosearch
3.2.18
mnogosearchmnogosearch
3.2.19
mnogosearchmnogosearch
3.2.20
mnogosearchmnogosearch
3.2.21
mnogosearchmnogosearch
3.2.22
mnogosearchmnogosearch
3.2.23
mnogosearchmnogosearch
3.2.24
mnogosearchmnogosearch
3.2.25
mnogosearchmnogosearch
3.2.26
mnogosearchmnogosearch
3.2.42
mnogosearchmnogosearch
3.3.0
mnogosearchmnogosearch
3.3.1
mnogosearchmnogosearch
3.3.2
mnogosearchmnogosearch
3.3.3
mnogosearchmnogosearch
3.3.4
mnogosearchmnogosearch
3.3.5
mnogosearchmnogosearch
3.3.6
mnogosearchmnogosearch
3.3.7
mnogosearchmnogosearch
3.3.8
mnogosearchmnogosearch
3.3.9
mnogosearchmnogosearch
3.3.10
𝑥
= Vulnerable software versions