CVE

Id
44290  
CVE No.
CVE-2010-1706  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in login.php in 2daybiz Auction Script allow remote attackers to execute arbitrary SQL commands via (1) the login field (aka the username parameter), and possibly (2) the password field, to index.php. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20100504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
482878 44290 CVE-2010-1706 MISC:http://packetstormsecurity.org/1004-exploits/2daybizauctionscript-sql.txt  View
482879 44290 CVE-2010-1706 EXPLOIT-DB:12414  View
482880 44290 CVE-2010-1706 URL:http://www.exploit-db.com/exploits/12414  View
482881 44290 CVE-2010-1706 BID:39728  View
482882 44290 CVE-2010-1706 URL:http://www.securityfocus.com/bid/39728  View
482883 44290 CVE-2010-1706 OSVDB:64097  View
482884 44290 CVE-2010-1706 URL:http://osvdb.org/64097  View
482885 44290 CVE-2010-1706 SECUNIA:39621  View
482886 44290 CVE-2010-1706 URL:http://secunia.com/advisories/39621  View
482887 44290 CVE-2010-1706 VUPEN:ADV-2010-1015  View
482888 44290 CVE-2010-1706 URL:http://www.vupen.com/english/advisories/2010/1015  View
482889 44290 CVE-2010-1706 XF:2daybiz-login-sql-injection(58188)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39667 JVNDB-2010-005452 Siestta の login.php におけるディレクトリトラバーサルの脆弱性 Siestta の login.php には、register_globals が有効になっている際、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2010-1710 44290 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005452.html  View