CVE-2010-1051 - Multiple SQL injection vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) month parameters

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) month parameters

Published Mar 22, 2010

7.5

HIGH

CVSS 2.0

EPSS 0.89%

Description

Multiple SQL injection vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) month parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

http://secunia.com/advisories/38494
third-party-advisoryx_refsource_SECUNIAVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1083
Advisory

Link	Providers	Tags
http://secunia.com/advisories/38494		third-party-advisoryx_refsource_SECUNIAVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1083		Advisory