CVE-2010-2716

2010-07-1318:00:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.001

Percentile

27.8%

JSON

Multiple SQL injection vulnerabilities in PsNews 1.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) ndetail.php and (2) print.php.

References

packetstormsecurity.org/1007-exploits/psnews-sql.txt

www.exploit-db.com/exploits/14251

www.securityfocus.com/bid/41410

exchange.xforce.ibmcloud.com/vulnerabilities/60129