CVE-2010-5023 in Digital Interchange Calendar

Riassunto

di MITRE

SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intDivisionID parameter.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 02/11/2011
• Divulgazione: 02/11/2011
• Moderazione: accettato
• Voce: VDB-59336
• CPE: pronto
• CWE: CWE-89 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.5 (NVD)
• EPSS: 0.01179
• KEV: no
• Attività: molto basso
• Settore: Hostingprovider, Industry, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2010-5023
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2010-5023
• CVE Details: https://www.cvedetails.com/cve/CVE-2010-5023/