Unscored severity · published Mar 10, 2010
CVE-2010-0955
SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter
–
CVSS
1.2%
EPSS
No
On KEV
Description
SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BF
Bild Flirt Community · Media-products
2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0955
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0955
Exploit
http://4004securityproject.wordpress.com/2010/03/07/bild-flirt-system-v2-0-index-php-id-sql-injection/
Exploit
http://osvdb.org/62780
Exploit
http://packetstormsecurity.org/1003-exploits/bildflirt-sql.txt
Vendor Advisory
http://secunia.com/advisories/38870
Exploit
http://www.exploit-db.com/exploits/11648
Exploit
http://www.securityfocus.com/bid/38585