medium6.8Public exploit code
CVE-2010-1604
Multiple SQL injection vulnerabilities in admin_login.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the (1) user p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NCT Jobs Portal Script - Cross-Site Scripting / Authentication Bypass2010-04-24 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in admin_login.php in NCT Jobs Portal Script allow remote attackers to execute arbitrary SQL commands via the (1) user parameter (aka login field) and (2) passwd parameter (aka password field). NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ncrypted | Nct Jobs Portal Script | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/1004-exploits/nctjobsportal-sqlxss.txt
- http://secunia.com/advisories/39601
- http://www.exploit-db.com/exploits/12370
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58080
- http://packetstormsecurity.org/1004-exploits/nctjobsportal-sqlxss.txt
- http://secunia.com/advisories/39601
- http://www.exploit-db.com/exploits/12370
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58080