CVE-2010-2340

2010-06-1821:00:00

mitre

www.cve.org

arab portal 2.2

sql injection

remote attackers

magic_quotes_gpc

msearch action

AI Score

8.3

Confidence

Low

EPSS

0.001

Percentile

28.6%

JSON

SQL injection vulnerability in members.php in Arab Portal 2.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the by parameter in the msearch action.

References

osvdb.org/65370

packetstormsecurity.org/1006-exploits/arabportal22x-sql.txt

secunia.com/advisories/40142

www.securityfocus.com/bid/40735