CVE-2010-4974

EPSS 1.2%

SQL injection vulnerability in info.php in BrotherScripts (BS) and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencepacketstormsecurity.org/1007-exploits/bsautodealer-sql.txtunverified cve_referencewww.exploit-db.com/exploits/14239unverified exploitdbwww.exploit-db.com/exploits/14239unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/66013 http://packetstormsecurity.org/1007-exploits/bsautodealer-sql.txt http://secunia.com/advisories/40391 http://securityreason.com/securityalert/8489 https://exchange.xforce.ibmcloud.com/vulnerabilities/60061 http://www.exploit-db.com/exploits/14239 http://www.securityfocus.com/bid/41384