Skip to content

CVE-2010-4935 SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sid parameter.

HighCVSS 7.5 EPSS 0.90%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sid parameter.

Affected products

ProductAffected versionsFixed in
khader abbeb entrans <= 0.3.2 No fix listed
khader abbeb entrans = 0.1.1 No fix listed
khader abbeb entrans = 0.2 No fix listed
khader abbeb entrans = 0.3 No fix listed
khader abbeb entrans = 0.3.1 No fix listed

References