Skip to content

CVE-2010-0631 Multiple SQL injection vulnerabilities in index.php in Eicra Car Rental-Script, when the plugin_id parameter is 4, allow remote attackers to execute arbitrary SQL commands via the (1) users (username)...

HighCVSS 7.5 EPSS 0.91% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

Multiple SQL injection vulnerabilities in index.php in Eicra Car Rental-Script, when the plugin_id parameter is 4, allow remote attackers to execute arbitrary SQL commands via the (1) users (username) and (2) passwords parameters.

Affected products

ProductAffected versionsFixed in
eicrasoft eicra car rental-script All versions No fix listed

References

  • 38389 third-party-advisory vendor-advisory
  • 11323 exploit