CVE-2013-7192

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.30%

Published

Dec 20, 2013

Modified

Apr 28, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBDynamic Biz Website Builder 'QuickWeb' 1.0 - '/login.asp' Multiple Field SQL Injections / Authentication Bypass Exploit-DBDynamic Biz Website Builder (QuickWeb) 1.0 - '/apps/news-events/newdetail.asp?id' SQL Injection TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple SQL injection vulnerabilities in Dynamic Biz Website Builder (QuickWeb) allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to apps/news-events/newdetail.asp, or the (2) UserID or (3) Password to login.asp.

Weaknesses (CWE)

CWE-89

Affected Products (1)

etoshop · dynamic_biz_website_builder_quickwebvulnerable

References (6)

http://packetstormsecurity.com/files/124451

Exploit

http://www.securityfocus.com/bid/64371

https://exchange.xforce.ibmcloud.com/vulnerabilities/89844

http://packetstormsecurity.com/files/124451

Exploit

http://www.securityfocus.com/bid/64371

https://exchange.xforce.ibmcloud.com/vulnerabilities/89844

KEV Catalog EPSS Scores Vendors All CVEs