Description
SQL injection vulnerability in index.php in ClientExec 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) billshowid, (2) billdetailid, (3) fuse, and (4) frmClientID parameters.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
No affected versions have been published.
Timeline
- Published
- Dec 31, 2005
- Last modified
- Jun 16, 2026
- NVD status
- Modified