exploitDog

GHSA-7fgf-gwfr-hp5w

Опубликовано: 02 мая 2022

Источник: github

Github: Не прошло ревью

Описание

SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username.

SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2010-0400
http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+lenny5.diff.gz
http://www.debian.org/security/2010/dsa-2030
http://www.securityfocus.com/bid/39253

EPSS

Процентиль: 75%

0.01717

Низкий

CVE ID

Дефекты

CWE-89

Связанные уязвимости

CVE-2010-0400

ubuntu

больше 16 лет назад

SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username.

CVE-2010-0400

nvd

больше 16 лет назад

SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username.

CVE-2010-0400

debian

больше 16 лет назад

SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows rem ...

EPSS

Процентиль: 75%

0.01717

Низкий

CVE ID

Дефекты

CWE-89