Lucene search
HistoryOct 05, 2011 - 10:55 a.m.
CVE-2010-4854
cve-2010-4854
sql injection
ajax
coupon.php
zuitu 1.6
remote attackers
security vulnerability
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.1%
SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a consume action.
Affected configurations
Node
zuituzuituMatch1.6
| CPE | Name | Operator | Version |
|---|---|---|---|
| zuitu:zuitu | zuitu | eq | 1.6 |
Related
nvd
nvd
CVE-2010-4854
2011-10-05 10:55:06
prion
prion
Sql injection
2011-10-05 10:55:00
cvelist
cvelist
CVE-2010-4854
2011-10-05 10:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.6 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.1%
Related for CVE-2010-4854