CVE-2010-2135 Multiple SQL injection vulnerabilities in login.php in HazelPress Lite 0.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) password fields.
HighCVSS 7.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in login.php in HazelPress Lite 0.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) password fields.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hazelpress | = 0.0.4 | No fix listed |
References
- packetstormsecurity.org exploit
- 11602 exploit
- hazelpress-login-sql-injection(56587) vdb-entry