Unscored severity · published Nov 2, 2011
CVE-2010-5033
SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL commands via the CatDisplay parameter
–
CVSS
1%
EPSS
No
On KEV
Description
SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL commands via the CatDisplay parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FU
Fusebox · Fusebox
5.5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-5033
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-5033
Exploit
http://packetstormsecurity.org/1005-exploits/fusebox-sql.txt
securityreason.com
http://securityreason.com/securityalert/8520
Exploit
http://www.exploit-db.com/exploits/12786
Exploit
http://www.securityfocus.com/bid/40439
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/59003
More from Fusebox
–
CVE-2008-2284
PHP remote file inclusion vulnerability in fusebox5.php in Fusebox 5.5.1 allows remote attackers to execute arbitrary PHP code via a URL in the FUSEBOX_APPLICATION_PATH parameter