CVE-2010-0611

Multiple SQL injection vulnerabilities in adminlogin.php in Baal Systems 3.8 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.97% chance of exploitation in the next 30 days, 60th percentile

Published

2010-02-11

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/11346

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/11346

References

• CVE Record
• NVD entry

Related

• CVE-2010-0610
• CVE-2010-0614
• CVE-2010-0608
• CVE-2010-0619
• CVE-2010-0607
• CVE-2010-0620