CVE-2013-2690

NONE

Published Mar 28, 201313y ago · Modified Jun 16, 20262w ago

Published Mar 28, 2013 13y ago

Last Modified Jun 16, 2026 2w ago

Description

SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter in a logoff action.

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-89 SQL Injection Injection

Affected Products 1

Vendor	Product	Version	Range
synchroweb	synconnect	2.0	any

References 7

archives.neohapsis.com http://archives.neohapsis.com/archives/bugtraq/2013-03/0134.html

Exploit
osvdb.org http://osvdb.org/91693

Vendor Advisory
osvdb.org http://osvdb.org/ref/91/synconnect.txt

Exploit
packetstormsecurity.com http://packetstormsecurity.com/files/120958/SynConnect-SQL-Injection.html

Exploit
exploit-db.com http://www.exploit-db.com/exploits/24898
securityfocus.com http://www.securityfocus.com/bid/58711

Exploit
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/83040

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.