CVEvulnerability
CVE-2010-0611
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-02-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in adminlogin.php in Baal Systems 3.8 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
Affected configurations
• baalsystems baal systems (<= 3.8)
• baalsystems baal systems 3.6
• baalsystems baal systems 3.7
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://packetstormsecurity.org/1002-exploits/baalsystems-sql.txt Exploit
- http://www.exploit-db.com/exploits/11346 Exploit
- http://www.securityfocus.com/bid/38139 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56147 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.org/1002-exploits/baalsystems-sql.txt Exploit
- http://www.exploit-db.com/exploits/11346 Exploit
- http://www.securityfocus.com/bid/38139 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56147 exchange.xforce.ibmcloud.com