Vulnerability Description
SQL injection vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the email parameter.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Preprojects | Pre Classified Listings Asp | All versions |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.org/0812-exploits/preclass-sqlxss.txtExploit
- http://secunia.com/advisories/38768Vendor Advisory
- http://www.exploit-db.com/exploits/11589Exploit
- http://www.securityfocus.com/bid/38446Exploit
- http://packetstormsecurity.org/0812-exploits/preclass-sqlxss.txtExploit
- http://secunia.com/advisories/38768Vendor Advisory
- http://www.exploit-db.com/exploits/11589Exploit
- http://www.securityfocus.com/bid/38446Exploit
FAQ
What is CVE-2010-1369?
CVE-2010-1369 is a vulnerability with a CVSS score of 7.5 (HIGH). SQL injection vulnerability in signup.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the email parameter.
How severe is CVE-2010-1369?
CVE-2010-1369 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-1369?
Check the references section above for vendor advisories and patch information. Affected products include: Preprojects Pre Classified Listings Asp.