Lucene search

[email protected]CVE-2010-2141

HistoryJun 02, 2010 - 7:30 p.m.

CVE-2010-2141

2010-06-0219:30:00

CWE-89

[email protected]

web.nvd.nist.gov

cve-2010-2141

sql injection

nitro web gallery

pictureid parameter

remote attackers

nvd

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

27.6%

JSON

SQL injection vulnerability in index.php in NITRO Web Gallery allows remote attackers to execute arbitrary SQL commands via the PictureId parameter in an open action.

CPENameOperatorVersion
nitropowered:nitro_web_gallerynitropowered nitro web galleryeq1.3
nitropowered:nitro_web_gallerynitropowered nitro web galleryeq1.4.2
nitropowered:nitro_web_gallerynitropowered nitro web galleryeq1.4.3
nitropowered:nitro_web_gallerynitropowered nitro web galleryeq1.4.3a
nitropowered:nitro_web_gallerynitropowered nitro web galleryeq1.4.1
nitropowered:nitro_web_gallerynitropowered nitro web galleryeq1.4

CPE	Name	Operator	Version
nitropowered:nitro_web_gallery	nitropowered nitro web gallery	eq	1.3
nitropowered:nitro_web_gallery	nitropowered nitro web gallery	eq	1.4.2
nitropowered:nitro_web_gallery	nitropowered nitro web gallery	eq	1.4.3
nitropowered:nitro_web_gallery	nitropowered nitro web gallery	eq	1.4.3a
nitropowered:nitro_web_gallery	nitropowered nitro web gallery	eq	1.4.1
nitropowered:nitro_web_gallery	nitropowered nitro web gallery	eq	1.4

References

packetstormsecurity.org/1005-exploits/nitro-sql.txt

www.exploit-db.com/exploits/12735

www.securityfocus.com/bid/40350

exchange.xforce.ibmcloud.com/vulnerabilities/58877

9.3 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

27.6%

JSON

Related for CVE-2010-2141

prion1 cvelist1