CVE-2011-0510
Status: ModifiedHigh (7.5)—
SQL injection vulnerability in cart.php in Advanced Webhost Billing System (AWBS) 2.9.2 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the oid parameter in an add_other action.
CVSS
- Version: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Base score: 7.5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 2.04%
- Percentile among all scored CVEs: 80
- Score date: 10/4/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-89
References
Raw JSON (NVD)
Show
{
"id": "CVE-2011-0510",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2011-01-20T19:00:11.083",
"references": [
{
"url": "http://secunia.com/advisories/42944",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.exploit-db.com/exploits/16003",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64726",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/42944",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.exploit-db.com/exploits/16003",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64726",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in cart.php in Advanced Webhost Billing System (AWBS) 2.9.2 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the oid parameter in an add_other action."
},
{
"lang": "es",
"value": "Vulnerabilidad de inyección SQL en cart.php en Advanced Webhost Billing System (AWBS) v.2.9.2 y posiblemente versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro oid en un acción add_other"
}
],
"lastModified": "2026-06-16T23:27:32.037",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C3393C6A-88A8-4CB5-ABD0-20E73615A800",
"versionEndIncluding": "2.9.2"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D701AEB-A3CE-4A64-A3B4-B3D985D0EDB7"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8152473-A8E4-461F-95BA-87F353FED94F"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82CBBAC5-8E2C-4488-A87D-90A8681473FC"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8DA99BDB-D134-4565-AB7A-8853FAAEFF56"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8132C75B-593F-4526-B170-FFFADA049ED2"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "01E5B5D2-C28A-4F8D-8B52-E8553E2CC699"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F06E14D-B033-49C3-A6EA-F51B771ED29A"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "971822F8-70E8-475F-BA26-D2D1930BA4B3"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "820338AF-2D78-4ACA-841C-CB63CF541593"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88160F87-37CB-49AD-A857-CF9F162203BC"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E56EF9F5-017B-418E-BDEE-64C10FEC888E"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1AE03F68-A71D-44EB-9E85-FA801A62DFF9"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85D7273F-1706-4C2A-AFCE-A2E1CF236C6F"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21E26CBE-CB16-4F3F-9772-33350A1E627E"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9B31390-F548-4888-BCAF-70D3A1020BE0"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C092251D-D03E-490D-996D-61A95E8FAED5"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE13BE53-E6AA-4AAE-BA0A-8F8B75DFDEB2"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A7B6E58-1E7C-47E4-8C32-10435DC396E4"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37E9AF43-CFC6-40B8-AE2F-CCDA92C47885"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A964DE8-D234-4096-826E-DA24A5C3EB51"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72142FBA-29ED-469E-9F12-CB0287E0E371"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B6A5F83-92CD-4C17-9E8D-2336BBE86483"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D36EFF76-5043-4F15-ADC8-A2909738C846"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C779B546-6B1C-49EC-AE8D-F00F0AE7ADE0"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8ADE65A-F12E-49CA-8121-2AA7426CA604"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8342052D-93B3-437B-A119-94468CC1F058"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DE91FA9-B746-4C40-A308-FC3283F46F7D"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "570E875F-AF26-4D66-9825-34EC49572890"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96E421D1-788F-4D6F-8A4C-7B0231ADB5C0"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A88DBD0-9EEA-4784-9B6B-CBB4475DD265"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1A0E46D-8B69-45E6-82E3-0D300AEA0916"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.7.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C04CB58-803F-4704-BB22-3DE28F5A6CF8"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.7.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26A04DE5-3F92-4CC4-9B8E-04E184F59495"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.7.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "663922BB-5FAD-43A4-A5DA-344B6068EF78"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "30DA6C1B-6793-4811-B5F2-257287E8EBF1"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06CC1BC2-D926-4A24-84B6-CF0DAC5F34B4"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C238EE1A-2BCD-4D26-8FD4-754926DFD927"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.8.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D26BA15-2E20-4CBF-AEBF-E51F9EFA19FB"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.8.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF268BE6-8DC8-4EA8-847D-9DB4329514B6"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.8.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D6B8A99-89A6-453A-8026-E37B468F180B"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "993D3E09-D071-4B7F-9284-D97C098382E7"
},
{
"criteria": "cpe:2.3:a:awbs:advanced_webhost_billing_system:2.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38CFB17A-DABD-4B70-969D-B777E94D1D7E"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}