cbcvebase.
CVE-2010-3267
published 2010-12-02

CVE-2010-3267: Multiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the qu_id…

PriorityP339medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EXPLOIT
EPSS
1.94%
77.5th percentile
Multiple SQL injection vulnerabilities in BugTracker.NET before 3.4.5 allow remote authenticated users to execute arbitrary SQL commands via (1) the qu_id parameter to bugs.aspx, (2) the row_id parameter to delete_query.aspx, the (3) new_project or (4) us_id parameter to edit_bug.aspx, or (5) the bug_list parameter to massedit.aspx. NOTE: some of these details are obtained from third party information.

Affected

85 ranges· showing 25
VendorProductVersion rangeFixed in
ifdefinedbugtracker.net<= 3.4.4—
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
ifdefinedbugtracker.net——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.