Vulnerability Details CVE-2010-2673
SQL injection vulnerability in profile_view.php in Devana 1.6.6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://osvdb.org/63278
- http://packetstormsecurity.org/1003-exploits/devana-sql.txt
- http://secunia.com/advisories/39121
- http://www.exploit-db.com/exploits/11922
- http://osvdb.org/63278
- http://packetstormsecurity.org/1003-exploits/devana-sql.txt
- http://secunia.com/advisories/39121
- http://www.exploit-db.com/exploits/11922
Products affected by CVE-2010-2673
-
cpe:2.3:a:devana:devana:*
-
cpe:2.3:a:devana:devana:1.0
-
cpe:2.3:a:devana:devana:1.1.1
-
cpe:2.3:a:devana:devana:1.2.4
-
cpe:2.3:a:devana:devana:1.3.3
-
cpe:2.3:a:devana:devana:1.4.3
-
cpe:2.3:a:devana:devana:1.5.3