CVE-2010-1046 Multiple SQL injection vulnerabilities in index.php in Rostermain 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) userid (username) and (2) password parameters.
HighCVSS 7.5
EPSS 0.97%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in index.php in Rostermain 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) userid (username) and (2) password parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ryan marshall rostermain | <= 1.1 | No fix listed |
References
- 62162 vdb-entry
- 38440 third-party-advisory vendor-advisory
- 11356 exploit
- ADV-2010-0318 vdb-entry vendor-advisory