high7.5Public exploit code
CVE-2010-0690
SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbitrary SQL commands via the pfid paramet…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Video Games Rentals Script - SQL Injection2010-02-11 · webapps · multiple · Verified
Impact
SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbitrary SQL commands via the pfid parameter in a catalog action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Commodityrentals | Video Games Rentals | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/62295
- http://packetstormsecurity.org/1002-exploits/videogamesrental-sql.txt
- http://secunia.com/advisories/38555
- http://www.exploit-db.com/exploits/11409
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56226
- http://osvdb.org/62295
- http://packetstormsecurity.org/1002-exploits/videogamesrental-sql.txt
- http://secunia.com/advisories/38555
- http://www.exploit-db.com/exploits/11409
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56226