CVE-2017-10004

🗓️ 08 Aug 2017 15:00:00Reported by oracleType

cve🔗 web.nvd.nist.gov👁 88 Views🌐 WEB

Vulnerability in Solaris component of Oracle Sun Systems Suite, allowing high privileged attacker to compromise Solaris. CVSS 3.0 Base Score 6.

Reporter	Title	Published	Views	Family All 26
0day.today	Linux Kernel - The Huge Dirty Cow Overwriting The Huge Zero Page Exploit	1 Dec 201700:00	–	zdt
0day.today	glibc ld.so - Memory Leak / Buffer Overflow Vulnerability	14 Dec 201700:00	–	zdt
0day.today	b2evolution CMS 6.8.10 PHP Code Execution Vulnerability	3 Jan 201800:00	–	zdt
0day.today	Vanilla < 2.1.5 - Cross-Site Request Forgery Vulnerability	8 Jan 201800:00	–	zdt
0day.today	Primefaces 5.x - Remote Code Execution Exploit	18 Jan 201800:00	–	zdt
0day.today	Linux Kernel - The Huge Dirty Cow Overwriting The Huge Zero Page (2) Exploit	20 Mar 201800:00	–	zdt
0day.today	Vehicle Sales Management System - Multiple Vulnerabilities	20 Mar 201800:00	–	zdt
0day.today	phpMyAdmin 4.7.x - Cross-Site Request Forgery Vulnerability	29 Aug 201800:00	–	zdt
Atlassian	Code Injection and Directory Traversal in plexus-utils	25 Jan 202104:06	–	atlassian
BDU FSTEC	The vulnerability of the Solaris component (a kernel subsystem of the operating system) allows a attacker to gain access to all resources of the operating system.	18 Aug 201700:00	–	bdu_fstec

NVD

Node

oracle solarisMatch10

oracle solarisMatch11

[
  {
    "product": "Solaris Operating System",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "10"
      },
      {
        "status": "affected",
        "version": "11"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1038938
securityfocus	www.securityfocus.com/bid/99843
oracle	www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html

Parameter	Position	Path	Description
db	query param	sql.php	CSRF exploit for phpMyAdmin 4.7.x enabling arbitrary SQL via sql_query parameter (password change, file write etc.)
table	query param	sql.php	CSRF exploit for phpMyAdmin 4.7.x enabling arbitrary SQL via sql_query parameter (password change, file write etc.)
sql_query	query param	sql.php	CSRF exploit for phpMyAdmin 4.7.x enabling arbitrary SQL via sql_query parameter (password change, file write etc.)
db	query param	import.php	CSRF exploit to execute dangerous SQL (e.g., DROP PROCEDURE, EMPTY ALL) via sql_query parameter
table	query param	import.php	CSRF exploit to execute dangerous SQL (e.g., DROP PROCEDURE, EMPTY ALL) via sql_query parameter
sql_query	query param	import.php	CSRF exploit to execute dangerous SQL (e.g., DROP PROCEDURE, EMPTY ALL) via sql_query parameter

17 Jun 2026 00:59Current

6.2Medium risk

Vulners AI Score6.2

CVSS 36.7

CVSS 27.2

EPSS0.00466

SSVC