Skip to content
OpenAdvisories

Product · Sourceforge

OpenBiz Cubi Lite

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.2

    OpenBiz Cubi Lite 3.0.8 SQL Injection via username Parameter

    OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameter. Attackers can submit POST requests to /bin/controller.php with malicious SQL …