CVE-2010-0954

Опубликовано: 10 мар. 2010

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in search_result.asp in Pre Projects Pre E-Learning Portal allows remote attackers to execute arbitrary SQL commands via the course_ID parameter.

Ссылки

http://evilc0de.blogspot.com/2010/03/pre-e-learning-portal-sql-injection.html
Exploit
http://osvdb.org/62774
Exploit
http://secunia.com/advisories/38891
Vendor Advisory
http://www.packetstormsecurity.com/1003-exploits/preelearningportal-sql.txt
Exploit
http://www.securityfocus.com/bid/38582
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/56729
http://evilc0de.blogspot.com/2010/03/pre-e-learning-portal-sql-injection.html
Exploit
http://osvdb.org/62774
Exploit
http://secunia.com/advisories/38891
Vendor Advisory
http://www.packetstormsecurity.com/1003-exploits/preelearningportal-sql.txt
Exploit
http://www.securityfocus.com/bid/38582
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/56729

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:preprojects:pre_e-learning_portal:*:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00765

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-jwx2-v7qw-r273

github

почти 4 года назад