PT-2010-2497 · Commodityrentals · Commodityrentals Books/Ebooks Rentals Script

CVE-2010-0761

·

Publicado

2010-03-02

·

Atualizado

2024-02-14

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions CommodityRentals Books/eBooks Rentals Script (affected versions not specified)
Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cat id parameter in a "gamecatalog" action.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2010-0761

Produtos afetados

Commodityrentals Books/Ebooks Rentals Script