Unscored severity · published May 6, 2010
CVE-2010-1740
SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands via the lng parameter
–
CVSS
2%
EPSS
No
On KEV
Description
SQL injection vulnerability in newsletter.php in GuppY 4.5.18 allows remote attackers to execute arbitrary SQL commands via the lng parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GU
Guppy · Freeguppy
4.5.18 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1740
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1740
Exploit
http://packetstormsecurity.org/1005-exploits/guppy-sql.txt
Exploit
http://www.exploit-db.com/exploits/12484
Exploit
http://www.securityfocus.com/bid/39860
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/58277
More from Guppy
9.8
CVE-2023-31903
GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file