CVE-2010-1498

ALTO 7.5CVE-2010-1498 · Published 23/04/2010 · updated 16/06/2026

In breve

CVE-2010-1498 è una vulnerabilità ALTO (CVSS 7.5) che riguarda dl stats (clausvb).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.2%, superiore al 82.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
dl stats clausvb	`≤ 1.2`	No fix yet

Description

Multiple SQL injection vulnerabilities in dl_stats before 2.0 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) download.php and (2) view_file.php.

References

packetstormsecurity.org/1004-exploits/dlstats-sqlxssadmin.txt · Exploit
secunia.com/advisories/39496 · Vendor Advisory
exploit-db.com/exploits/12280 · Exploit
osvdb.org/63907
osvdb.org/63908
securityfocus.com/bid/39592 · Exploit
vupen.com/english/advisories/2010/0939 · Vendor Advisory
xenuser.org/2010/04/18/dl_stats-multiple-vulnerabilities-sqli-xss-unprotected-admin-panel
xenuser.org/documents/security/dl_stats_multiple_vulnerabilities.txt · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/57917

Altre vulnerabilità di dl stats

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free