MitreCVELIST:CVE-2010-1918

HistoryMay 12, 2010 - 12:00 a.m.

CVE-2010-1918

2010-05-1200:00:00

mitre

www.cve.org

efront

sql injection

cve-2010-1918

ask_chat.php

AI Score

8.4

Confidence

Low

EPSS

0.002

Percentile

57.6%

JSON

SQL injection vulnerability in ask_chat.php in eFront 3.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the chatrooms_ID parameter.

References

osvdb.org/64506

packetstormsecurity.org/1005-exploits/MOPS-2010-018.pdf

secunia.com/advisories/39728

www.php-security.org/2010/05/09/mops-2010-018-efront-ask_chat-chatrooms_id-sql-injection-vulnerability/index.html

www.securityfocus.com/bid/40032

www.vupen.com/english/advisories/2010/1101