CVEvulnerability
CVE-2010-2134
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-06-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in login.php in Project Man 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter.
Affected configurations
• http-solution project man 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://www.exploit-db.com/exploits/11584 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56580 exchange.xforce.ibmcloud.com
- http://www.exploit-db.com/exploits/11584 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56580 exchange.xforce.ibmcloud.com