CVE-2010-1923

Phpscripte24 Web Social Network Freunde Community - SQL Injection

Title source: rule

Description

SQL injection vulnerability in user.php in Hi Web Wiesbaden Web 2.0 Social Network Freunde Community System allows remote attackers to execute arbitrary SQL commands via the id parameter in a showgallery action.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Easy Laster · textwebappsphp

https://www.exploit-db.com/exploits/34014

View Code ZIP pw:eip

References (4)

Core 4

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/58583

Exploit x_refsource_misc

http://packetstormsecurity.org/1005-exploits/web20snfcs-sql.txt

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/39761

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/64513

Scores

EPSS 0.0046

EPSS Percentile 64.2%

Details

CWE

CWE-89

Status published

Products (1)

phpscripte24/web_social_network_freunde_community 2.0

Published May 12, 2010

Tracked Since Feb 18, 2026