CVE-2010-0980

ALTO 7.5CVE-2010-0980 · Published 16/03/2010 · updated 16/06/2026

In breve

CVE-2010-0980 è una vulnerabilità ALTO (CVSS 7.5) che riguarda l4d stats (mitchell sleeper).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.2%, superiore al 67.1% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
l4d stats mitchell_sleeper	`= 1.1`	No fix yet

Description

SQL injection vulnerability in player.php in Left 4 Dead (L4D) Stats 1.1 allows remote attackers to execute arbitrary SQL commands via the steamid parameter.

References

greyhathackers.wordpress.com/2010/01/02/left-4-dead-stats-1-1-sql-injection-vulnerability · Exploit
osvdb.org/61472 · Exploit
packetstormsecurity.org/1001-exploits/left4deadstats-sql.txt · Exploit
secunia.com/advisories/38008 · Vendor Advisory
exploit-db.com/exploits/10930 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/55299

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free