| Package | Affected versions | Patched versions |
|---|---|---|
| advanced webhost billing system | = 2.3.3= 2.5= 2.6.3= 2.7= 2.7.1 |
SQL injection vulnerability in news.php in Advanced Webhost Billing System (AWBS) 2.3.3 through 2.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the viewnews parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free