CVE-2010-4983

iScripts CyberMatch 1.0 - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-4983. PoCs published by Salvatore Fresta.

AI-analyzed exploit summary The document describes a blind SQL injection vulnerability in iScripts CyberMatch 1.0, where the 'id' parameter in profile.php is not properly sanitized. Exploitation requires magic_quotes_gpc to be disabled and the targeted user to have an uploaded image.

Description

SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Salvatore Fresta · textwebappsphp
https://www.exploit-db.com/exploits/14164

The document describes a blind SQL injection vulnerability in iScripts CyberMatch 1.0, where the 'id' parameter in profile.php is not properly sanitized. Exploitation requires magic_quotes_gpc to be disabled and the targeted user to have an uploaded image.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: iScripts CyberMatch 1.0
No auth needed
Prerequisites: magic_quotes_gpc disabled · target user has an uploaded image
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (7)

Core 7
Core References
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/8486
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/512141/100/0/threaded
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/14164
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/41300
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40434

Scores

EPSS 0.0122
EPSS Percentile 64.6%

Details

CWE
CWE-89
Status published
Products (1)
iscripts/cybermatch 1.0
Published Nov 01, 2011
Tracked Since Feb 18, 2026