7.5
CVSSv2

CVE-2010-1923

Published: 12/05/2010 Updated: 17/08/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in user.php in Hi Web Wiesbaden Web 2.0 Social Network Freunde Community System allows remote malicious users to execute arbitrary SQL commands via the id parameter in a showgallery action.

Vulnerable Product Search on Vulmon Subscribe to Product

phpscripte24 web social network freunde community 2.0

Exploits

source: wwwsecurityfocuscom/bid/40264/info Web 20 Social Network Freunde Community System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit ...