CVE-2010-4770

EPSS 1.0%

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a catalog action.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencepacketstormsecurity.org/files/view/96010/dvdrental-sql.txtunverified cve_referencewww.exploit-db.com/exploits/15578unverified exploitdbwww.exploit-db.com/exploits/15578unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.org/files/view/96010/dvdrental-sql.txt http://secunia.com/advisories/42330 http://securityreason.com/securityalert/8159 http://www.exploit-db.com/exploits/15578 http://www.securityfocus.com/bid/44988