CVE-2010-4917: SQL Injection
Published Oct 8, 2011
·Updated
SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL commands via the words parameter.
Affected Software
1 affected component
A-Blog A-Blog=2.0
Event History
Oct 8, 2011
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4917?
CVE-2010-4917 is considered a medium severity vulnerability due to its potential for SQL injection attacks.
2
How do I fix CVE-2010-4917?
To fix CVE-2010-4917, update A-Blog to a version that mitigates this SQL injection vulnerability.
3
What type of vulnerability is CVE-2010-4917?
CVE-2010-4917 is an SQL injection vulnerability found in A-Blog 2.0.
4
Who can be affected by CVE-2010-4917?
Any user of A-Blog 2.0 can be affected by CVE-2010-4917 if their application is exposed to untrusted inputs.
5
What are the consequences of exploiting CVE-2010-4917?
Exploiting CVE-2010-4917 could allow attackers to execute arbitrary SQL commands on the underlying database.