CVE-2010-4770

CommodityRentals DVD Rentals Script - SQL Injection

Title source: llm

Description

SQL injection vulnerability in index.php in CommodityRentals DVD Rentals Script allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a catalog action.

Exploits (1)

exploitdb WORKING POC

by JaMbA · textwebappsphp

https://www.exploit-db.com/exploits/15578

View Code ZIP pw:eip

References (5)

Core 5

Core References

Exploit exploit x_refsource_exploit-db

http://www.exploit-db.com/exploits/15578

Exploit x_refsource_misc

http://packetstormsecurity.org/files/view/96010/dvdrental-sql.txt

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/8159

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/44988

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/42330

Scores

EPSS 0.0089

EPSS Percentile 75.6%

Details

CWE

CWE-89

Status published

Products (1)

commodityrentals/dvd_rentals_script

Published Mar 23, 2011

Tracked Since Feb 18, 2026