CVEvulnerability
CVE-2010-4984
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-11-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via vectors involving the "Enter Reference Number Below" text box.
Affected configurations
• mykazaam notes management system
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://packetstormsecurity.org/1007-exploits/mykazaamnms-sqlxss.txt Exploit
- http://securityreason.com/securityalert/8494 securityreason.com
- http://www.exploit-db.com/exploits/14325 Exploit
- http://www.securityfocus.com/bid/41542 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60254 exchange.xforce.ibmcloud.com
- http://packetstormsecurity.org/1007-exploits/mykazaamnms-sqlxss.txt Exploit
- http://securityreason.com/securityalert/8494 securityreason.com
- http://www.exploit-db.com/exploits/14325 Exploit
- http://www.securityfocus.com/bid/41542 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60254 exchange.xforce.ibmcloud.com