CVE-2010-3404 | BDVDB-2026-43293 Detail

Description#

Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote attackers to execute arbitrary SQL commands via the (1) Criteria field in an unspecified form related to catlgsearch.aspx or (2) user name to an unspecified form related to adminlogin.aspx.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/43168
http://www.exploit-db.com/exploits/14980
https://exchange.xforce.ibmcloud.com/vulnerabilities/61767

Exploit#

http://www.exploit-db.com/exploits/14980

History#

Version 12010-09-16Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.