CVE-2010-1706

Опубликовано: 04 мая 2010

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow remote attackers to execute arbitrary SQL commands via (1) the login field (aka the username parameter), and possibly (2) the password field, to index.php. NOTE: some of these details are obtained from third party information.

Ссылки

http://osvdb.org/64097
http://packetstormsecurity.org/1004-exploits/2daybizauctionscript-sql.txt
Exploit
http://secunia.com/advisories/39621
Vendor Advisory
http://www.exploit-db.com/exploits/12414
Exploit
http://www.securityfocus.com/bid/39728
Exploit
http://www.vupen.com/english/advisories/2010/1015
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/58188
http://osvdb.org/64097
http://packetstormsecurity.org/1004-exploits/2daybizauctionscript-sql.txt
Exploit
http://secunia.com/advisories/39621
Vendor Advisory
http://www.exploit-db.com/exploits/12414
Exploit
http://www.securityfocus.com/bid/39728
Exploit
http://www.vupen.com/english/advisories/2010/1015
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/58188

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:2daybiz:auction_script:*:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01422

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-gp9r-98j2-7524

github

больше 3 лет назад