CVE-2010-4963: hulihanapplications hulihan bxr – CVSS 7.5 · Watchpost

← All vulnerabilities

CVE-2010-4963

高危 7.5CVE-2010-4963 · Published 09/10/2011 · updated 16/06/2026

要点

CVE-2010-4963 是影响 hulihan bxr (hulihanapplications) 的高危 (CVSS 7.5)漏洞。
未来 30 天内被利用的概率（EPSS）：1.2%，高于 68.0% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
hulihan bxr hulihanapplications	`= 0.6.8`	No fix yet

Description

SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the order_by parameter.

References

dev.hulihanapplications.com/issues/show/203 · Exploit
packetstormsecurity.org/1008-exploits/bxr-sqlxssxsrf.txt · Exploit
secunia.com/advisories/40875 · Vendor Advisory
securityreason.com/securityalert/8470
htbridge.ch/advisory/sql_injection_vulnerability_in_bxr.html · Exploit
securityfocus.com/archive/1/512887/100/0/threaded
vupen.com/english/advisories/2010/2023 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free