Unscored severity · published Nov 1, 2011
CVE-2010-4980
SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter
–
CVSS
2.4%
EPSS
No
On KEV
Description
SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RE
Reservelogic · Iscripts
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4980
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4980
Exploit
http://packetstormsecurity.org/1007-exploits/reservelogic-sql.txt
Vendor Advisory
http://secunia.com/advisories/40435
securityreason.com
http://securityreason.com/securityalert/8487
Exploit
http://www.exploit-db.com/exploits/14163
Exploit
http://www.salvatorefresta.net/files/adv/iScripts%20ReserveLogic%201.0%20SQL%20Injection%20Vulnerability-01072010.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/512137/100/0/threaded