CVE-2010-20112

🗓️ 21 Aug 2025 20:08:12Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 39 Views🌐 WEB

Stack overflow in NetOpacs webquery.dll from HTTP GET app param; SEH overwrite; IIS on legacy

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2010-20112	29 May 201815:50	–	circl
CNNVD	Amlib NetOpacs 安全漏洞	21 Aug 202500:00	–	cnnvd
Cvelist	CVE-2010-20112 Amlibweb NetOpacs webquery.dll Stack Buffer Overflow	21 Aug 202520:08	–	cvelist
EUVD	EUVD-2010-5308	7 Oct 202500:30	–	euvd
Metasploit	Amlibweb NetOpacs webquery.dll Stack Buffer Overflow	3 Aug 201000:00	–	metasploit
NVD	CVE-2010-20112	21 Aug 202520:15	–	nvd
Positive Technologies	PT-2025-34287 · Undefined · Undefined	21 Aug 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2010-20112: Stack-based Buffer Overflow	21 Aug 202500:00	–	rapid7
RedhatCVE	CVE-2010-20112	23 Aug 202520:13	–	redhatcve
Vulnrichment	CVE-2010-20112 Amlibweb NetOpacs webquery.dll Stack Buffer Overflow	21 Aug 202520:08	–	vulnrichment

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "webquery.dll (exposed via IIS)"
    ],
    "product": "Amlibweb Library Management System",
    "vendor": "Amlib",
    "versions": [
      {
        "status": "affected",
        "version": "*"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/16793
amlib	www.amlib.co.uk/product/product.aspx
vulncheck	www.vulncheck.com/advisories/amlibweb-netopacs-stack-buffer-overflow
fortiguard	www.fortiguard.com/encyclopedia/ips/24002
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/amlibweb_webquerydll_app.rb
advisories	www.advisories.checkpoint.com/defense/advisories/public/2013/cpai-2013-1344.html

Parameter	Position	Path	Description	CWE
app	query param	/amlibweb/webquery.dll	Stack-based buffer overflow in Amlibweb NetOpacs webquery.dll triggered by an overly long app parameter, enabling remote code execution via SEH overwrite (and possible EIP control via arbitrary parameter name).	CWE-121

16 Jun 2026 23:19Current

7.6High risk

Vulners AI Score7.6

CVSS 49.3

EPSS0.01121

SSVC

CWE-121