← Voltar para CVEs
CVE-2010-5015
N/ADescricao
SQL injection vulnerability in view_photo.php in 2daybiz Network Community Script allows remote attackers to execute arbitrary SQL commands via the alb parameter.
Detalhes CVE
Pontuacao CVSS v3.1N/A
Publicado11/2/2011
Ultima modificacao4/29/2026
Fontenvd
Avistamentos honeypot0
Produtos afetados
2daybiz:network_community_script
Fraquezas (CWE)
CWE-89
Referencias
http://secunia.com/advisories/40247(cve@mitre.org)
http://securityreason.com/securityalert/8511(cve@mitre.org)
http://www.securityfocus.com/bid/40913(cve@mitre.org)
https://exchange.xforce.ibmcloud.com/vulnerabilities/59496(cve@mitre.org)
http://secunia.com/advisories/40247(af854a3a-2127-422b-91ae-364da2661108)
http://securityreason.com/securityalert/8511(af854a3a-2127-422b-91ae-364da2661108)
http://www.packetstormsecurity.com/1006-exploits/2daybiz-sqlxss.txt(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/40913(af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/59496(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.