cve/cves/2010/CVE-2010-3404.md at main

admin/cve

0 Fork 0

mirror of https://github.com/0xMarcio/cve.git synced 2026-10-27 16:51:03 +00:00

Files

T

0xMarcio 81017c9871 Expand CVE PoC coverage and metadata

2026-09-01 19:01:07 +02:00

788 B

Raw Permalink Blame History

CVE-2010-3404

Description

Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote attackers to execute arbitrary SQL commands via the (1) Criteria field in an unspecified form related to catlgsearch.aspx or (2) user name to an unspecified form related to adminlogin.aspx.

POC

Reference

http://www.exploit-db.com/exploits/14980

Github

No PoCs found on GitHub currently.

ExploitDB

https://www.exploit-db.com/exploits/14980

788 B Raw Permalink Blame History