7.5
CVSSv2

CVE-2010-4356

Published: 01/12/2010 Updated: 02/12/2010
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in news_default.asp in Site2Nite Big Truck Broker allows remote malicious users to execute arbitrary SQL commands via the txtSiteId parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

site2nite big truck broker

Exploits

<!-- Site2Nite Big Truck Broker "txtSiteId" SQL Injection Vulnerability PRODUCT: Site2Nite Big Truck Broker PRODUCT URL: wwwsite2nitecom/productdetailasp?id=14 RESEARCHERS: underground-stockholmcom RESEARCHERS URL: underground-stockholmcom/ --> <html> <body> <form method="post" action="[host]/[path]/ne ...