CVE-2010-0458

2010-01-2820:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.001

Percentile

37.5%

JSON

Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to index.php and the (2) note parameter to blog.php.

References

packetstormsecurity.org/0512-exploits/blog12SQL.txt

www.exploit-db.com/exploits/11216

www.securityfocus.com/bid/37911

exchange.xforce.ibmcloud.com/vulnerabilities/55818

exchange.xforce.ibmcloud.com/vulnerabilities/55862