Lucene search

[email protected]CVE-2010-1918

HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-1918

2022-10-0316:21:01

CWE-89

[email protected]

web.nvd.nist.gov

cve-2010-1918

sql injection

vulnerability

ask_chat.php

efront 3.6.2

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.5%

JSON

SQL injection vulnerability in ask_chat.php in eFront 3.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the chatrooms_ID parameter.

Affected configurations

NVD

Node

efrontlearningefrontRange≤3.6.2

efrontlearningefrontMatch3.1.0

efrontlearningefrontMatch3.1.2

efrontlearningefrontMatch3.1.3

efrontlearningefrontMatch3.1.4

efrontlearningefrontMatch3.5.0

efrontlearningefrontMatch3.5.0beta1

efrontlearningefrontMatch3.5.0beta2

efrontlearningefrontMatch3.5.0beta3

efrontlearningefrontMatch3.5.0beta4

efrontlearningefrontMatch3.5.1

efrontlearningefrontMatch3.5.2

efrontlearningefrontMatch3.5.3

efrontlearningefrontMatch3.5.4

efrontlearningefrontMatch3.5.5

efrontlearningefrontMatch3.6

efrontlearningefrontMatch3.6.1

CPENameOperatorVersion
efrontlearning:efrontefrontlearning efrontle3.6.2
efrontlearning:efrontefrontlearning efronteq3.1.0
efrontlearning:efrontefrontlearning efronteq3.1.2
efrontlearning:efrontefrontlearning efronteq3.1.3
efrontlearning:efrontefrontlearning efronteq3.1.4
efrontlearning:efrontefrontlearning efronteq3.5.0
efrontlearning:efrontefrontlearning efronteq3.5.1
efrontlearning:efrontefrontlearning efronteq3.5.2
efrontlearning:efrontefrontlearning efronteq3.5.3
efrontlearning:efrontefrontlearning efronteq3.5.4

CPE	Name	Operator	Version
efrontlearning:efront	efrontlearning efront	le	3.6.2
efrontlearning:efront	efrontlearning efront	eq	3.1.0
efrontlearning:efront	efrontlearning efront	eq	3.1.2
efrontlearning:efront	efrontlearning efront	eq	3.1.3
efrontlearning:efront	efrontlearning efront	eq	3.1.4
efrontlearning:efront	efrontlearning efront	eq	3.5.0
efrontlearning:efront	efrontlearning efront	eq	3.5.1
efrontlearning:efront	efrontlearning efront	eq	3.5.2
efrontlearning:efront	efrontlearning efront	eq	3.5.3
efrontlearning:efront	efrontlearning efront	eq	3.5.4

Rows per page:

1-10 of 131

References

osvdb.org/64506

packetstormsecurity.org/1005-exploits/MOPS-2010-018.pdf

secunia.com/advisories/39728

www.php-security.org/2010/05/09/mops-2010-018-efront-ask_chat-chatrooms_id-sql-injection-vulnerability/index.html

www.securityfocus.com/bid/40032

www.vupen.com/english/advisories/2010/1101

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.5%

JSON

Related for CVE-2010-1918

nvd1 openvas1 prion1 cvelist1