CVE-2010-10009

frioux ptome sql injection

CVSS 5.5 MEDIUMEPSS 0.6%CWE-89

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.5EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Lifecycle

18 Jan 2023Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A vulnerability was found in frioux ptome. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. The patch is named 26829bba67858ca0bd4ce49ad50e7ce653914276. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218519.

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

frioux · ptome

References

https://github.com/frioux/ptome/commit/26829bba67858ca0bd4ce49ad50e7ce653914276 https://vuldb.com/?ctiid.218519 https://vuldb.com/?id.218519