Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2010-1918
SQL injection vulnerability in ask_chat.php in eFront 3.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the chatrooms_ID parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.011
EPSS Ranking
77.4%
CVSS Severity
CVSS v2 Score
7.5
References
http://osvdb.org/64506
http://packetstormsecurity.org/1005-exploits/MOPS-2010-018.pdf
http://secunia.com/advisories/39728
http://www.php-security.org/2010/05/09/mops-2010-018-efront-ask_chat-chatrooms_id-sql-injection-vulnerability/index.html
http://www.securityfocus.com/bid/40032
http://www.vupen.com/english/advisories/2010/1101
http://osvdb.org/64506
http://packetstormsecurity.org/1005-exploits/MOPS-2010-018.pdf
http://secunia.com/advisories/39728
http://www.php-security.org/2010/05/09/mops-2010-018-efront-ask_chat-chatrooms_id-sql-injection-vulnerability/index.html
http://www.securityfocus.com/bid/40032
http://www.vupen.com/english/advisories/2010/1101
Products affected by CVE-2010-1918
Efrontlearning
»
Efront
»
Version:
3.1.0
cpe:2.3:a:efrontlearning:efront:3.1.0
Efrontlearning
»
Efront
»
Version:
3.1.2
cpe:2.3:a:efrontlearning:efront:3.1.2
Efrontlearning
»
Efront
»
Version:
3.1.3
cpe:2.3:a:efrontlearning:efront:3.1.3
Efrontlearning
»
Efront
»
Version:
3.1.4
cpe:2.3:a:efrontlearning:efront:3.1.4
Efrontlearning
»
Efront
»
Version:
3.5.0
cpe:2.3:a:efrontlearning:efront:3.5.0
Efrontlearning
»
Efront
»
Version:
3.5.1
cpe:2.3:a:efrontlearning:efront:3.5.1
Efrontlearning
»
Efront
»
Version:
3.5.2
cpe:2.3:a:efrontlearning:efront:3.5.2
Efrontlearning
»
Efront
»
Version:
3.5.3
cpe:2.3:a:efrontlearning:efront:3.5.3
Efrontlearning
»
Efront
»
Version:
3.5.4
cpe:2.3:a:efrontlearning:efront:3.5.4
Efrontlearning
»
Efront
»
Version:
3.5.5
cpe:2.3:a:efrontlearning:efront:3.5.5
Efrontlearning
»
Efront
»
Version:
3.6
cpe:2.3:a:efrontlearning:efront:3.6
Efrontlearning
»
Efront
»
Version:
3.6.1
cpe:2.3:a:efrontlearning:efront:3.6.1
Efrontlearning
»
Efront
»
Version:
3.6.2
cpe:2.3:a:efrontlearning:efront:3.6.2
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved