62626vdb entry
http://osvdb.org/62626 CVE-2010-1092
Scripts Feed Business Directory - SQL Injection
Record summary
CVE-2010-1092 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the (1) us and (2) ps parameters.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBScripts Feed Business Directory - SQL InjectionExploitDB exploitby CruxNot analyzed1 file
References
738771Third-party advisory
http://secunia.com/advisories/38771 11592exploit
http://www.exploit-db.com/exploits/11592 38470vdb entry
http://www.securityfocus.com/bid/38470 ADV-2010-0494vdb entry
http://www.vupen.com/english/advisories/2010/0494 scriptsfeed-login-sql-injection(56570)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/56570 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2010-1092