CVE-2010-1092

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the (1) us and (2) ps parameters.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.15% chance of exploitation in the next 30 days, 66th percentile

Published

2010-03-24

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/11592

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/11592

Security advisories

• http://secunia.com/advisories/38771
• http://www.vupen.com/english/advisories/2010/0494
• http://www.securityfocus.com/bid/38470

References

• CVE Record
• NVD entry