CVE-2010-1092

EPSS 1.1%

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the (1) us and (2) ps parameters.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/11592unverified exploitdbwww.exploit-db.com/exploits/11592unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/62626 http://secunia.com/advisories/38771 https://exchange.xforce.ibmcloud.com/vulnerabilities/56570 http://www.exploit-db.com/exploits/11592 http://www.securityfocus.com/bid/38470 http://www.vupen.com/english/advisories/2010/0494