Lucene search
HistoryApr 07, 2011 - 2:23 p.m.
CVE-2010-4784
cve-2010-4784
sql injection
php web scripts
easy banner free 2009.05.18
security vulnerability
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
9 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
55.5%
Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
Affected configurations
Node
phpwebscriptseasy_banner_freeMatch2009.05.18
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpwebscripts:easy_banner_free | phpwebscripts easy banner free | eq | 2009.05.18 |
Related
cvelist
cvelist
CVE-2010-4784
2011-04-07 14:00:00
nvd
nvd
CVE-2010-4784
2011-04-07 14:23:53
prion
prion
Sql injection
2011-04-07 14:23:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
9 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
55.5%
Related for CVE-2010-4784