CVE-2010-0761

Опубликовано: 02 мар. 2010

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in index.php in CommodityRentals Books/eBooks Rentals Script allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a gamecatalog action.

Ссылки

http://osvdb.org/62277
Exploit
http://packetstormsecurity.org/1002-exploits/ebooksrental-sql.txt
Exploit
http://secunia.com/advisories/38520
Vendor Advisory
http://www.exploit-db.com/exploits/11402
Exploit
http://www.indonesiancoder.org/booksebooks-rental-software-sql-injection-vulnerability
Exploit
URL Repurposed
http://www.securityfocus.com/bid/38189
https://exchange.xforce.ibmcloud.com/vulnerabilities/56210
http://osvdb.org/62277
Exploit
http://packetstormsecurity.org/1002-exploits/ebooksrental-sql.txt
Exploit
http://secunia.com/advisories/38520
Vendor Advisory
http://www.exploit-db.com/exploits/11402
Exploit
http://www.indonesiancoder.org/booksebooks-rental-software-sql-injection-vulnerability
Exploit
URL Repurposed
http://www.securityfocus.com/bid/38189
https://exchange.xforce.ibmcloud.com/vulnerabilities/56210

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:commodityrentals:books\/ebooks_rentals_script:*:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01422

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-x9j8-m658-xw5v

github

почти 4 года назад