CVE-2010-1918

2022-10-0316:21:01

mitre

www.cve.org

efront

sql injection

cve-2010-1918

ask_chat.php

8.4 High

AI Score

Confidence

Low

0.027 Low

EPSS

Percentile

90.5%

JSON

SQL injection vulnerability in ask_chat.php in eFront 3.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the chatrooms_ID parameter.

References

osvdb.org/64506

packetstormsecurity.org/1005-exploits/MOPS-2010-018.pdf

secunia.com/advisories/39728

www.php-security.org/2010/05/09/mops-2010-018-efront-ask_chat-chatrooms_id-sql-injection-vulnerability/index.html

www.securityfocus.com/bid/40032

www.vupen.com/english/advisories/2010/1101