CVE-2010-1924

SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://osvdb.org/64512
http://secunia.com/advisories/39718	Vendor Advisory
http://www.exploit-db.com/exploits/12545	Exploit
http://www.securityfocus.com/bid/40040	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/58392
http://osvdb.org/64512
http://secunia.com/advisories/39718	Vendor Advisory
http://www.exploit-db.com/exploits/12545	Exploit
http://www.securityfocus.com/bid/40040	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/58392

Configurations

Configuration 1 (hide)

cpe:2.3:a:phpscripte24:live_shopping_multi_portal_system:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2010-05-12 16:07

Updated : 2025-04-11 00:51

NVD link : CVE-2010-1924

Mitre link : CVE-2010-1924

CVE.ORG link : CVE-2010-1924

JSON object : View

Products Affected

phpscripte24

live_shopping_multi_portal_system

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2010-1924", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-05-12T16:07:32.360", "references": [{"url": "http://osvdb.org/64512", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/39718", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.exploit-db.com/exploits/12545", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/40040", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58392", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/64512", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/39718", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.exploit-db.com/exploits/12545", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/40040", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58392", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in index.php in Hi Web Wiesbaden Live Shopping Multi Portal System allows remote attackers to execute arbitrary SQL commands via the artikel parameter."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n SQL en index.php en Hi Web Wiesbaden Live Shopping Multi Portal System, permite a atacantes remotos ejecutar comandos SQL de su elecci\u00f3n a trav\u00e9s del par\u00e1metro \"artikel\"."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:phpscripte24:live_shopping_multi_portal_system:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D5F52FE4-3407-46A9-8EFE-BDFAB385DBED"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}