Description
SQL injection vulnerability in index.php in ClientExec 2.3 allows remote attackers to execute arbitrary SQL commands via the (1) billshowid, (2) billdetailid, (3) fuse, and (4) frmClientID parameters.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://pridels0.blogspot.com/2005/11/clientexec-2x-multiple-sql-inj.html
- http://secunia.com/advisories/17756Exploit, Patch, Vendor Advisory
- http://www.ce-talk.com/showthread.php?t=653Patch
- http://www.clientexec.com/forum/showthread.php?t=8006Patch
- http://www.osvdb.org/21163Exploit
- http://www.vupen.com/english/advisories/2005/2628
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23271
- http://pridels0.blogspot.com/2005/11/clientexec-2x-multiple-sql-inj.html
- http://secunia.com/advisories/17756Exploit, Patch, Vendor Advisory
- http://www.ce-talk.com/showthread.php?t=653Patch
- http://www.clientexec.com/forum/showthread.php?t=8006Patch
- http://www.osvdb.org/21163Exploit
- http://www.vupen.com/english/advisories/2005/2628
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23271
Timeline
- Published
- Dec 31, 2005
- Last modified
- Jun 16, 2026
- NVD status
- Modified