Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-5024. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary The exploit demonstrates an SQL injection vulnerability in CuteSITE CMS 1.5.0 by injecting a UNION-based query to retrieve user data. It also mentions a cross-site scripting (XSS) vulnerability due to insufficient input sanitization.
Description
SQL injection vulnerability in manage/add_user.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the user_id parameter. NOTE: some of these details are obtained from third party information.
Exploits (1)
The exploit demonstrates an SQL injection vulnerability in CuteSITE CMS 1.5.0 by injecting a UNION-based query to retrieve user data. It also mentions a cross-site scripting (XSS) vulnerability due to insufficient input sanitization.