CVEvulnerability
CVE-2010-0458
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-01-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to index.php and the (2) note parameter to blog.php.
Affected configurations
• netartmedia blog system 1.5
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://packetstormsecurity.org/0512-exploits/blog12SQL.txt Exploit
- http://www.exploit-db.com/exploits/11216 Exploit
- http://www.securityfocus.com/bid/37911 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55818 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55862 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.org/0512-exploits/blog12SQL.txt Exploit
- http://www.exploit-db.com/exploits/11216 Exploit
- http://www.securityfocus.com/bid/37911 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55818 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55862 exchange.xforce.ibmcloud.com