CVE-2010-1336

HIGH 7.5CVE-2010-1336 · Published 09/04/2010 · updated 16/06/2026

In short

CVE-2010-1336 is a HIGH (CVSS 7.5) vulnerability affecting invohost (invohost).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
invohost invohost	`= 3.4`	No fix yet

Description

Multiple SQL injection vulnerabilities in INVOhost 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) newlanguage parameters to site.php, (3) search parameter to manuals.php, and (4) unspecified vectors to faq.php. NOTE: some of these details are obtained from third party information.

References

osvdb.org/63157
osvdb.org/63158
secunia.com/advisories/39095 · Vendor Advisory
exploit-db.com/exploits/11874 · Exploit
securityfocus.com/bid/38962 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/57161
exchange.xforce.ibmcloud.com/vulnerabilities/57162

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free