Lucene search

K
cve[email protected]CVE-2010-5036
HistoryNov 02, 2011 - 9:55 p.m.

CVE-2010-5036

2011-11-0221:55:18
CWE-89
web.nvd.nist.gov
23
cve-2010-5036
sql injection
addsale.php
iscripts eswap 2.0
nvd

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.6%

SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter.

Affected configurations

NVD
Node
iscriptseswapMatch2.0
CPENameOperatorVersion
iscripts:eswapiscripts eswapeq2.0

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

77.6%

Related for CVE-2010-5036