CVE-2010-1918

높음 7.5CVE-2010-1918 · Published 12/05/2010 · updated 16/06/2026

요약

CVE-2010-1918은(는) efront (efrontlearning)에 영향을 주는 높음 (CVSS 7.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.2%, 전체 취약점의 67.0%보다 높음.
아직 패치 버전 정보가 없습니다. 참고 자료의 공급업체 권고를 확인하세요.

Package	Affected versions	Patched versions
efront efrontlearning	`= 3.1.0= 3.1.2= 3.1.3= 3.1.4= 3.5.0= 3.5.1= 3.5.2= 3.5.3= 3.5.4= 3.5.5= 3.6= 3.6.1≤ 3.6.2`	No fix yet

Description

SQL injection vulnerability in ask_chat.php in eFront 3.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the chatrooms_ID parameter.

References

osvdb.org/64506 · Exploit
packetstormsecurity.org/1005-exploits/MOPS-2010-018.pdf · Exploit
secunia.com/advisories/39728 · Vendor Advisory
php-security.org/2010/05/09/mops-2010-018-efront-ask_chat-chatrooms_id-sql-injection-vulnerability/index.html · Exploit
securityfocus.com/bid/40032 · Exploit
vupen.com/english/advisories/2010/1101 · Vendor Advisory

efront의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

efront

efrontlearning

= 3.1.0= 3.1.2= 3.1.3= 3.1.4= 3.5.0= 3.5.1= 3.5.2= 3.5.3= 3.5.4= 3.5.5= 3.6= 3.6.1≤ 3.6.2

No fix yet

efront의 다른 취약점

모두 보기 →