CVE-2013-10016: fanzila WebFinance save_taxes.php sql injection

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-03 · updated 2026-06-16
Weakness: CWE-89

Description

A vulnerability was found in fanzila WebFinance 0.5 and classified as critical. This issue affects some unknown processing of the file htdocs/admin/save_taxes.php. The manipulation of the argument id leads to sql injection. The patch is named 306f170ca2a8203ae3d8f51fb219ba9e05b945e1. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-220055.

Affected products

fanzila WebFinance: 0.5

References

https://github.com/fanzila/WebFinance/commit/306f170ca2a8203ae3d8f51fb219ba9e05b945e1
https://vuldb.com/?ctiid.220055
https://vuldb.com/?id.220055
https://github.com/fanzila/WebFinance/commit/306f170ca2a8203ae3d8f51fb219ba9e05b945e1
https://vuldb.com/?ctiid.220055
https://vuldb.com/?id.220055

Get alerted when CVE-2013-10016 or the next vulnerability affects your stack