CVE-2010-1923

ALTO 7.5CVE-2010-1923 · Published 12/05/2010 · updated 16/06/2026

In breve

CVE-2010-1923 è una vulnerabilità ALTO (CVSS 7.5) che riguarda web social network freunde community (phpscripte24).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.97%, superiore al 62.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
web social network freunde community phpscripte24	`= 2.0`	No fix yet

Description

SQL injection vulnerability in user.php in Hi Web Wiesbaden Web 2.0 Social Network Freunde Community System allows remote attackers to execute arbitrary SQL commands via the id parameter in a showgallery action.

References

osvdb.org/64513
packetstormsecurity.org/1005-exploits/web20snfcs-sql.txt · Exploit
secunia.com/advisories/39761 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/58583

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free