CVE-2010-1370

2010-04-1320:20:00

mitre

www.cve.org

vulnerability

sql injection

pre classified listings

asp

remote attackers

arbitrary sql commands

siteid parameter

AI Score

8.4

Confidence

Low

EPSS

0.001

Percentile

44.3%

JSON

SQL injection vulnerability in detailad.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the siteid parameter.

References

packetstormsecurity.org/0812-exploits/preclass-sqlxss.txt

secunia.com/advisories/38768