CVE-2010-2610

EPSS 1.2%

Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL commands via the (1) jid parameter to view_current_job.php, (2) job_iid parameter to show_search_more.php, and (3) left_cat parameter to show_search_result.php.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/14025unverified exploitdbwww.exploit-db.com/exploits/14025unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/65714 http://osvdb.org/65715 http://osvdb.org/65716 http://secunia.com/advisories/40301 https://exchange.xforce.ibmcloud.com/vulnerabilities/59733 http://www.exploit-db.com/exploits/14025 http://www.securityfocus.com/bid/41123