CVE-2010-1049

2010-03-2218:17:00

mitre

www.cve.org

AI Score

8.5

Confidence

Low

EPSS

0.001

Percentile

48.1%

JSON

Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to execute arbitrary SQL commands via the (1) noentryid parameter to blog/index.php and the (2) p parameter to index2.php.

References

secunia.com/advisories/38430

www.exploit-db.com/exploits/11357

www.vupen.com/english/advisories/2010/0317