← Back

CVE-2011-5038

nvd nist
Published: Dec 30, 2011Modified: Apr 29, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

SQL injection vulnerability in hitCode hitAppoint 4.5.17 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected (57)

Products: Hitcode: Hitappoint
1 product
Hitappoint
Configuration A
57 vulnerable
Vulnerable SoftwareAffected Versions
Hitcode
Up to 4.5.17
Version 4.0.10
Version 4.0.11
Version 4.0.12
Version 4.0.13
Version 4.0.14
Version 4.0.15
Version 4.0.16
Version 4.0.17
Version 4.0.9
Version 4.0
Version 4.1.0
Version 4.1.1
Version 4.1.2
Version 4.1.3
Version 4.1.4
Version 4.2.0
Version 4.2.1
Version 4.2.2
Version 4.2.3
Version 4.2.4
Version 4.2.5
Version 4.2.6
Version 4.3.0
Version 4.3.1
Version 4.3.2
Version 4.3.3
Version 4.3.4
Version 4.3.5
Version 4.4.0
Version 4.4.10
Version 4.4.1
Version 4.4.2
Version 4.4.3
Version 4.4.4
Version 4.4.5
Version 4.4.6
Version 4.4.7
Version 4.4.8
Version 4.4.9
Version 4.5.10
Version 4.5.11
Version 4.5.12
Version 4.5.13
Version 4.5.14
Version 4.5.15
Version 4.5.16
Version 4.5.1
Version 4.5.2
Version 4.5.3
Version 4.5.4
Version 4.5.5
Version 4.5.6
Version 4.5.7
Version 4.5.8
Version 4.5.9
Version 4.5.

References (6)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.