CVE-2013-7189: Iscripts Autohoster

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to execute arbitrary SQL commands via the cmbdomain parameter to (1) checktransferstatus.php, (2) checktransferstatusbck.php, or (3) additionalsettings.php; or (4) invno parameter to payinvoiceothers.php.

Affected products

• Iscripts Autohoster: version 2.4 only

Published 2013-12-20. Last modified 2026-06-17.