CVE-2010-2688

Site2Nite Boat Classifieds - SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in detail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the ID parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Sangteamtham · textwebappsasp
https://www.exploit-db.com/exploits/13990

References (7)

Core 7
Core References
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/13990
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1576
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/65686
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/59671
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40263
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/41046

Scores

EPSS 0.0172
EPSS Percentile 82.5%

Details

CWE
CWE-89
Status published
Products (1)
site2nite/boat_classifieds
Published Jul 12, 2010
Tracked Since Feb 18, 2026