CVE-2010-3212

Seagull <0.6.7 - SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in index.php in Seagull 0.6.7 and earlier allows remote attackers to execute arbitrary SQL commands via the frmQuestion parameter in a retrieve action, in conjunction with a user/password PATH_INFO.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Sweet · textwebappsphp
https://www.exploit-db.com/exploits/14838

References (5)

Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/67689
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/14838
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/61469
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/41169

Scores

EPSS 0.0050
EPSS Percentile 66.3%

Details

CWE
CWE-89
Status published
Products (10)
seagullproject.org/seagull 0.4.6
seagullproject.org/seagull 0.4.7
seagullproject.org/seagull 0.6.0 (4 CPE variants)
seagullproject.org/seagull 0.6.1
seagullproject.org/seagull 0.6.2
seagullproject.org/seagull 0.6.3
seagullproject.org/seagull 0.6.4
seagullproject.org/seagull 0.6.5
seagullproject.org/seagull 0.6.6
seagullproject.org/seagull < 0.6.7
Published Sep 03, 2010
Tracked Since Feb 18, 2026