CVE Feed

    Dashboard / CVE / CVE-2010-4612

    CVE-2010-4612

    Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) user_name and (2) usr_email parameters to user/1/hregister.html, (3) usr_email parameter to user/1/hlogin.html, (4) useremail parameter to user/1/forgotpass.html, and the (5) q parameter to search/1.html. NOTE: some of these details are obtained from third party information.

    Published:Dec 29, 2010
    Last Modified:Apr 11, 2025
    EPS:Dec 29, 2010
    EPSS Score:0.01186
    CVSS Score:6.8

    Affected Products

    Vendor
    Hycus
    Product
    Hycus Cms

    Exploits

    http://www.exploit-db.com/exploits/15797http://www.htbridge.ch/advisory/sql_injection_in_hycus_cms.htmlhttp://www.htbridge.ch/advisory/sql_injection_in_hycus_cms_1.htmlhttp://www.htbridge.ch/advisory/sql_injection_in_hycus_cms_2.htmlhttp://www.htbridge.ch/advisory/sql_injection_in_hycus_cms_3.htmlhttp://www.securityfocus.com/bid/45527http://www.exploit-db.com/exploits/15797http://www.htbridge.ch/advisory/sql_injection_in_hycus_cms.htmlhttp://www.htbridge.ch/advisory/sql_injection_in_hycus_cms_1.htmlhttp://www.htbridge.ch/advisory/sql_injection_in_hycus_cms_2.htmlhttp://www.htbridge.ch/advisory/sql_injection_in_hycus_cms_3.htmlhttp://www.securityfocus.com/bid/45527https://www.exploit-db.com/exploits/15797

    References

    http://secunia.com/advisories/42567
    http://www.exploit-db.com/exploits/15797
    http://www.htbridge.ch/advisory/sql_injection_in_hycus_cms.html
    http://www.htbridge.ch/advisory/sql_injection_in_hycus_cms_1.html
    http://www.htbridge.ch/advisory/sql_injection_in_hycus_cms_2.html
    http://www.htbridge.ch/advisory/sql_injection_in_hycus_cms_3.html
    http://www.securityfocus.com/archive/1/515382/100/0/threaded
    http://www.securityfocus.com/bid/45527
    https://exchange.xforce.ibmcloud.com/vulnerabilities/64438
    http://secunia.com/advisories/42567
    http://www.exploit-db.com/exploits/15797
    http://www.htbridge.ch/advisory/sql_injection_in_hycus_cms.html
    http://www.htbridge.ch/advisory/sql_injection_in_hycus_cms_1.html
    http://www.htbridge.ch/advisory/sql_injection_in_hycus_cms_2.html
    http://www.htbridge.ch/advisory/sql_injection_in_hycus_cms_3.html
    http://www.securityfocus.com/archive/1/515382/100/0/threaded
    http://www.securityfocus.com/bid/45527
    https://exchange.xforce.ibmcloud.com/vulnerabilities/64438

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High