CVE-2010-5008

ALTO 7.5CVE-2010-5008 · Published 02/11/2011 · updated 16/06/2026

In breve

CVE-2010-5008 è una vulnerabilità ALTO (CVSS 7.5) che riguarda brightsuite groupware (denaliintranet).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.0%, superiore al 63.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
brightsuite groupware denaliintranet	`= 5.4`	No fix yet

Description

SQL injection vulnerability in pages/contact_list_mail_form.asp in BrightSuite Groupware 5.4 allows remote attackers to execute arbitrary SQL commands via the ContactID parameter.

References

packetstormsecurity.org/1006-exploits/brightsuite-sql.txt · Exploit
securityreason.com/securityalert/8507
exploit-db.com/exploits/13843 · Exploit
securityfocus.com/bid/40845 · Exploit
vupen.com/english/advisories/2010/1459 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free