high7.5Public exploit code
CVE-2010-2691
Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow remote attackers to execute arbitrary SQL commands via the (1) sbid parame…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- 2DayBiz - Multiple SQL Injections2010-06-25 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow remote attackers to execute arbitrary SQL commands via the (1) sbid parameter to products_details.php, (2) pid parameter to products/products.php, and (3) designid parameter to designview.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 2daybiz | Custom T-Shirt Design Script | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/65824
- http://osvdb.org/65825
- http://osvdb.org/65826
- http://secunia.com/advisories/40362
- http://www.exploit-db.com/exploits/14048
- http://www.packetstormsecurity.com/1006-exploits/2daybiztshirt-sql.txt
- http://www.securityfocus.com/bid/41154
- http://www.vupen.com/english/advisories/2010/1608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59790
- http://osvdb.org/65824
- http://osvdb.org/65825
- http://osvdb.org/65826
- http://secunia.com/advisories/40362
- http://www.exploit-db.com/exploits/14048
- http://www.packetstormsecurity.com/1006-exploits/2daybiztshirt-sql.txt
- http://www.securityfocus.com/bid/41154
- http://www.vupen.com/english/advisories/2010/1608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59790