7.5
CVSSv2

CVE-2010-5014

Published: 02/11/2011 Updated: 29/08/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in standings.php in Elite Gaming Ladders 3.5 allows remote malicious users to execute arbitrary SQL commands via the ladder[id] parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

eliteladders elite gaming ladders 3.5

Exploits

[-] Elite Gaming Ladders v35 SQL Injection Vulnerability [-] ---Date : 2010-06-19 ---Author : ahwak2000 ---Email : zu5[at]hotmailcom [-] Script Info [-] ---Home : eliteladderscom/ [-] Vulnerability [-] sitecom/[path]/standingsphp?ladder[id]=[SQL INj] ...