CVE-2010-0458

Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to index.php and the (2) note parameter to blog.php.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.00% chance of exploitation in the next 30 days, 60th percentile

Published

2010-01-28

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/11216

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/11216

References

• CVE Record
• NVD entry

Related

• CVE-2010-0457
• CVE-2010-0459
• CVE-2010-0456
• CVE-2010-0461
• CVE-2010-0453
• CVE-2010-0462