CVEvulnerability
CVE-2010-2135
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-06-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in login.php in HazelPress Lite 0.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) password fields.
Affected configurations
• hazelpress hazelpress 0.0.4
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://packetstormsecurity.org/1002-exploits/hazelpresslite-sql.txt Exploit
- http://www.exploit-db.com/exploits/11602 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56587 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.org/1002-exploits/hazelpresslite-sql.txt Exploit
- http://www.exploit-db.com/exploits/11602 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56587 exchange.xforce.ibmcloud.com