Lucene search
HistoryNov 02, 2011 - 9:55 p.m.
CVE-2010-5024
cve-2010-5024
sql injection
cutesite cms
remote authenticated users
nvd
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
38.8%
SQL injection vulnerability in manage/add_user.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the user_id parameter. NOTE: some of these details are obtained from third party information.
Affected configurations
Node
cutesitecutesite_cmsMatch1.2.3
ORcutesitecutesite_cmsMatch1.5.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| cutesite:cutesite_cms | cutesite cutesite cms | eq | 1.2.3 |
| cutesite:cutesite_cms | cutesite cutesite cms | eq | 1.5.0 |
Related
nvd
nvd
CVE-2010-5024
2011-11-02 21:55:16
prion
prion
Sql injection
2011-11-02 21:55:00
cvelist
cvelist
CVE-2010-5024
2011-11-02 21:00:00
htbridge
htbridge
Multiple Vulnerabilities in CuteSITE CMS
2010-05-20 00:00:00
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
8.2 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
38.8%
Related for CVE-2010-5024