CVE-2010-10009 - frioux ptome sql injection

Back Back to CVE browser

CRITICAL

frioux ptome sql injection

Published Jan 18, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 0.64%

Description

A vulnerability was found in frioux ptome. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The patch is named 26829bba67858ca0bd4ce49ad50e7ce653914276. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218519.

Affected products

Vendor Frioux Product Ptome Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Frioux

Ptome

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1029
Advisory
https://github.com/frioux/ptome/commit/26829bba67858ca0bd4ce49ad50e7ce653914276
patchThird Party Advisory
https://vuldb.com/?ctiid.218519
signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.218519
vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1029		Advisory
https://github.com/frioux/ptome/commit/26829bba67858ca0bd4ce49ad50e7ce653914276		patchThird Party Advisory
https://vuldb.com/?ctiid.218519		signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.218519		vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory