CVE-2010-0400: SQL Injection
Published Apr 7, 2010
·Updated
SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username.
Affected Software
1 affected component
Mahara Mahara=1.0.4
Remediation
Event History
Apr 7, 2010
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
via NVD·03:30 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-0400?
CVE-2010-0400 is classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2010-0400?
To fix CVE-2010-0400, upgrade Mahara from version 1.0.4 to a patched version that resolves the SQL injection vulnerability.
3
What types of attacks can CVE-2010-0400 facilitate?
CVE-2010-0400 can facilitate attacks such as unauthorized database access and data manipulation through SQL injection.
4
Which software versions are affected by CVE-2010-0400?
CVE-2010-0400 specifically affects Mahara version 1.0.4.
5
Is CVE-2010-0400 easily exploitable?
Yes, CVE-2010-0400 is considered easily exploitable as it requires only a crafted username input to trigger the SQL injection.