Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-4151
HistoryNov 03, 2010 - 8:00 p.m.

CVE-2010-4151

2010-11-0320:00:02
CWE-89
[email protected]
web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

83.1%

JSON

SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033.

Affected configurations

NVD
Node
deluxebbdeluxebbRange≤1.3
OR
deluxebbdeluxebbMatch1.0
OR
deluxebbdeluxebbMatch1.1
OR
deluxebbdeluxebbMatch1.2
OR
deluxebbdeluxebbMatch1.05
OR
deluxebbdeluxebbMatch1.06
OR
deluxebbdeluxebbMatch1.07
OR
deluxebbdeluxebbMatch1.08
OR
deluxebbdeluxebbMatch1.09

Related

prion 4
cvelist 5
cve 5
nvd 4
htbridge 1
openvas 5
nessus 1
prion
prion
Sql injection
2010-11-03 20:00:00
Sql injection
2009-03-20 18:30:00
Sql injection
2006-05-22 19:02:00
cvelist
cvelist
CVE-2010-4151
2010-11-03 19:00:00
CVE-2009-1033
2009-03-20 18:00:00
CVE-2005-2989
2005-09-19 04:00:00
cve
cve
CVE-2010-4151
2010-11-03 20:00:02
CVE-2009-1033
2009-03-20 18:30:00
CVE-2005-2989
2005-09-20 00:03:00
nvd
nvd
CVE-2009-1033
2009-03-20 18:30:00
CVE-2006-2503
2006-05-22 19:02:00
CVE-2005-2989
2005-09-20 00:03:00
htbridge
htbridge
SQL Injection Vulnerability in DeluxeBB
2010-10-05 00:00:00
openvas
openvas
DeluxeBB 'xthedateformat' Parameter SQL Injection Vulnerability
2010-10-21 00:00:00
DeluxeBB 'xthedateformat' Parameter SQL Injection Vulnerability
2010-10-21 00:00:00
DeluxeBB Multiple SQL injection flaws
2006-03-26 00:00:00
nessus
nessus
DeluxeBB Multiple Scripts SQL Injection
2005-09-19 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.1 High

AI Score

Confidence

Low

0.009 Low

EPSS

Percentile

83.1%

JSON
Related for NVD:CVE-2010-4151
prion4cvelist5cve5nvd4htbridge1openvas5nessus1