CVE-2010-4974

BrotherScripts < - SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in info.php in BrotherScripts (BS) and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL commands via the id parameter.

Exploits (1)

exploitdb WORKING POC
by Easy Laster · textwebappsphp
https://www.exploit-db.com/exploits/14239

References (7)

Core 7
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40391
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/14239
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/66013
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/60061
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/8489
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/41384

Scores

EPSS 0.0185
EPSS Percentile 83.1%

Details

CWE
CWE-89
Status published
Products (1)
brotherscripts/auto_dealer
Published Nov 01, 2011
Tracked Since Feb 18, 2026