Unscored severity · published Jun 9, 2010
CVE-2010-2257
SQL injection vulnerability in index_ie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter
–
CVSS
0.9%
EPSS
No
On KEV
Description
SQL injection vulnerability in index_ie.php in Pay Per Minute Video Chat Script 2.0 and 2.1 allows remote attackers to execute arbitrary SQL commands via the page parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PP
Pay Per Minute Video Chat Script · Payperviewvideosoftware
2.0; 2.1 · source: NVD
Affected product
PP
Pay Per Minute Video Chat Script
Payperviewvideosoftware
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2257
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2257
Exploit
http://packetstormsecurity.org/1001-exploits/ppmvcs-sqlxss.txt
Exploit
http://www.exploit-db.com/exploits/10983
More from Pay Per Minute Video Chat Script
–
CVE-2010-2256
Multiple cross-site scripting (XSS) vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id…