CVE-2010-2610: SQL Injection
Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL commands via the (1) jid parameter to viewcurrentjob.php, (2) jobiid parameter to showsearchmore.php, and (3) leftcat parameter to showsearchresult.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2610?
CVE-2010-2610 is rated as a high severity vulnerability due to the potential for remote code execution and data manipulation.
How do I fix CVE-2010-2610?
To fix CVE-2010-2610, ensure input sanitization and validation for the vulnerable parameters in the Job Site Script.
What systems are affected by CVE-2010-2610?
CVE-2010-2610 affects the 2daybiz Job Site Script software, specifically versions that are not patched against the identified vulnerabilities.
What kind of attacks can CVE-2010-2610 enable?
CVE-2010-2610 can enable SQL injection attacks, allowing attackers to execute arbitrary SQL commands on the database.
Who can exploit CVE-2010-2610?
Remote attackers can exploit CVE-2010-2610 without authentication, making it a significant risk for exposed installations.