CVE-2010-4776

2011-03-2321:00:00

mitre

www.cve.org

AI Score

8.4

Confidence

Low

EPSS

0.001

Percentile

27.8%

JSON

SQL injection vulnerability in takefreestart.php in PreProjects Pre Online Tests Generator Pro allows remote attackers to execute arbitrary SQL commands via the tid2 parameter.

References

packetstormsecurity.org/files/view/95817/potgp-sql.txt

securityreason.com/securityalert/8158

www.exploit-db.com/exploits/15526

exchange.xforce.ibmcloud.com/vulnerabilities/63246