CVE-2010-2459

SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute arbitrary SQL commands via the videoid parameter.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2010-06-25

Last modified

2024-08-07

Weaknesses

CWE-89

Affected products

• Video Community Portal Script (2daybiz)

References

• http://osvdb.org/65810
• http://packetstormsecurity.org/1006-exploits/2daybizvcp-sql.txt
• http://www.exploit-db.com/exploits/13970
• http://www.securityfocus.com/bid/41022
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59638