SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in kategorihaberx.asp.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Haberx | Haberx | 1.0.2 (including) | 1.0.2 (including) |
| Haberx | Haberx | 1.0.3 (including) | 1.0.3 (including) |
| Haberx | Haberx | 1.0.9 (including) | 1.0.9 (including) |
| Haberx | Haberx | 1.1 (including) | 1.1 (including) |