CVE-2010-2459: SQL Injection

Published Jun 25, 2010

Updated

SQL injection vulnerability in video.php in 2daybiz Video Community Portal Script 1.0 allows remote attackers to execute arbitrary SQL commands via the videoid parameter.

Affected Software

1 affected component

2daybiz Video Community Portal Script=1.0

Event History

Jun 25, 2010

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2010-2459?

CVE-2010-2459 is classified as a high severity vulnerability due to its potential to allow remote attackers to execute arbitrary SQL commands.

How do I fix CVE-2010-2459?

To fix CVE-2010-2459, you should validate and sanitize user input for the videoid parameter to prevent SQL injection.

What software is affected by CVE-2010-2459?

CVE-2010-2459 affects version 1.0 of the 2daybiz Video Community Portal Script.

What is SQL injection as it relates to CVE-2010-2459?

SQL injection in the context of CVE-2010-2459 refers to the exploitation that allows remote attackers to manipulate SQL queries through the videoid parameter.

Can CVE-2010-2459 be exploited without authentication?

Yes, CVE-2010-2459 can be exploited by remote attackers without authentication, making it particularly dangerous.