CVE-2010-1706
CVE-2010-1706
Multiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow remote attackers to execute arbitrary SQL commands via (1) the login field (aka the username parameter), and possibly (2) the password field, to index.php. NOTE: some of these details are obtained from third party information.
Productos afectados
n/a · n/aPoCs públicas encontradas — 3
cve_referencepacketstormsecurity.org/1004-exploits/2daybizauctionscript-sql.txtno verificadocve_referencewww.exploit-db.com/exploits/12414no verificadoexploitdbwww.exploit-db.com/exploits/12414no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
http://osvdb.org/64097http://packetstormsecurity.org/1004-exploits/2daybizauctionscript-sql.txthttp://secunia.com/advisories/39621https://exchange.xforce.ibmcloud.com/vulnerabilities/58188http://www.exploit-db.com/exploits/12414http://www.securityfocus.com/bid/39728http://www.vupen.com/english/advisories/2010/1015