CVE-2010-1051

AudiStat 1.3 - SQL Injection

Title source: llm

Description

Multiple SQL injection vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) month parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Exploits (1)

exploitdb WORKING POC
webappsphp
https://www.exploit-db.com/exploits/11334

Scores

EPSS 0.0023
EPSS Percentile 45.8%

Classification

CWE
CWE-89
Status draft

Affected Products (1)

alexandre_dubus/audistat

Timeline

Published Mar 23, 2010
Tracked Since Feb 18, 2026