CVE-2010-1705 - SQL injection vulnerability in casting_view.php in Modelbook allows remote attackers to execute arbitrary SQL commands via the adnum parameter

HIGH

SQL injection vulnerability in casting_view.php in Modelbook allows remote attackers to execute arbitrary SQL commands via the adnum parameter

Published May 4, 2010

7.5

HIGH

CVSS 2.0

EPSS 0.96%

SQL injection vulnerability in casting_view.php in Modelbook allows remote attackers to execute arbitrary SQL commands via the adnum parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

http://secunia.com/advisories/39646
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/12443
exploitx_refsource_EXPLOIT-DB
http://www.vupen.com/english/advisories/2010/1028
vdb-entryx_refsource_VUPENVendor Advisory

Link	Providers	Tags
http://secunia.com/advisories/39646		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/12443		exploitx_refsource_EXPLOIT-DB
http://www.vupen.com/english/advisories/2010/1028		vdb-entryx_refsource_VUPENVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published May 4, 2010

Updated Aug 7, 2024

Reserved May 4, 2010

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a