CVE-2010-3428: SQL Injection
Published Sep 16, 2010
·Updated
SQL injection vulnerability in modules/notes/json.php in Intermesh Group-Office 3.5.9 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a category action.
Affected Software
1 affected component
Intermesh Group-Office=3.5.9
Event History
Sep 16, 2010
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-3428?
CVE-2010-3428 is classified as a high severity vulnerability due to its potential to allow remote SQL command execution.
2
How do I fix CVE-2010-3428?
To fix CVE-2010-3428, upgrade to a patched version of Intermesh Group-Office that addresses the SQL injection vulnerability.
3
What type of vulnerability is CVE-2010-3428?
CVE-2010-3428 is an SQL injection vulnerability affecting the Intermesh Group-Office application.
4
Which software is affected by CVE-2010-3428?
CVE-2010-3428 affects Intermesh Group-Office version 3.5.9.
5
What impact could CVE-2010-3428 have on my system?
Exploitation of CVE-2010-3428 could lead to unauthorized access to the database, data manipulation, or deletion.