CVE-2010-0723: mhproducts ero auktion – CVSS 7.5 · Watchpost

← All vulnerabilities

CVE-2010-0723

높음 7.5CVE-2010-0723 · Published 26/02/2010 · updated 16/06/2026

요약

CVE-2010-0723은(는) ero auktion (mhproducts)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.8%, 전체 취약점의 79.1%보다 높음.
아직 패치 버전 정보가 없습니다. 참고 자료의 공급업체 권고를 확인하세요.

Package	Affected versions	Patched versions
ero auktion mhproducts	`= 2.0= 2010`	No fix yet

Description

SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter.

References

4004securityproject.wordpress.com/2010/02/21/ero-auktion-2010-sql-injection-news-php · Exploit
4004securityproject.wordpress.com/2010/02/21/ero-auktion-v-2-0-sql-injection-news-php · Exploit
packetstormsecurity.org/1002-exploits/eroauktion20-sql.txt · Exploit
packetstormsecurity.org/1002-exploits/eroauktion2010-sql.txt · Exploit
secunia.com/advisories/38666 · Vendor Advisory
exploit-db.com/exploits/11521 · Exploit
exploit-db.com/exploits/11522 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/56446

ero auktion의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free