CVE-2010-5019: SQL Injection
Published Nov 2, 2011
·Updated
SQL injection vulnerability in viewphoto.php in 2daybiz Online Classified Script allows remote attackers to execute arbitrary SQL commands via the alb parameter.
Affected Software
1 affected component
2daybiz Online Classified Script
Event History
Nov 2, 2011
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-5019?
CVE-2010-5019 has a medium severity rating due to its potential for remote SQL command execution.
2
How do I fix CVE-2010-5019?
To fix CVE-2010-5019, validate and sanitize the alb parameter in view_photo.php to prevent SQL injection.
3
Who is affected by CVE-2010-5019?
CVE-2010-5019 affects users of the 2daybiz Online Classified Script that are utilizing the vulnerable view_photo.php file.
4
What type of attack can exploit CVE-2010-5019?
CVE-2010-5019 can be exploited through SQL injection attacks that allow remote attackers to execute arbitrary SQL commands.
5
Can CVE-2010-5019 lead to data compromise?
Yes, successful exploitation of CVE-2010-5019 can lead to unauthorized access to or manipulation of the database.