CVE-2013-4887
NONE
Published Jan 29, 201412y ago · Modified Jun 16, 20262w ago
Published Jan 29, 2014 12y ago
Last Modified Jun 16, 2026 2w ago
Description
SQL injection vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to execute arbitrary SQL commands via the displayid parameter.
Threat Intelligence
No active exploitation signals — not in CISA KEV and no EPSS score yet.
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-89 SQL Injection Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| xibosignage | xibo | 1.4.2 | any |
References 3
- infosec42.blogspot.com http://infosec42.blogspot.com/2013/08/exploit-xibo-digital-signage-sql.html
- securityfocus.com http://www.securityfocus.com/bid/62071
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/86777
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.