SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to execute arbitrary SQL commands via the artID parameter.
References
Link | Resource |
---|---|
http://secunia.com/advisories/40152 | Vendor Advisory |
http://www.securityfocus.com/bid/40764 | Exploit |
http://www.exploit-db.com/exploits/13815 | Exploit |
http://osvdb.org/65411 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/59343 |
Configurations
Information
Published : 2011-10-21 03:55
Updated : 2017-08-28 18:29
NVD link : CVE-2010-4967
Mitre link : CVE-2010-4967
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
atcom
- netvolution