CVE-2010-4997
published 2011-11-02CVE-2010-4997: SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a…
PriorityP343high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
0.93%
56.1th percentile
SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action.
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_redhat7.2HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-v5h4-mp28-fj56: SQL injection vulnerability in index
ghsa_unreviewed·2022-05-17
CVE-2010-4997 [HIGH] CWE-89 GHSA-v5h4-mp28-fj56: SQL injection vulnerability in index
SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action.
Red Hat
gnome-power-manager: Screen not locked on resume from hibernate / suspend
vendor_redhat·2009-09-11·CVSS 7.2
CVE-2009-4997 [HIGH] gnome-power-manager: Screen not locked on resume from hibernate / suspend
gnome-power-manager: Screen not locked on resume from hibernate / suspend
gnome-power-manager 2.27.92 does not properly implement the lock_on_suspend and lock_on_hibernate settings for locking the screen when the suspend or hibernate button is pressed, which might make it easier for physically proximate attackers to access an unattended laptop via a resume action, a related issue to CVE-2010-2532. NOTE: this issue exists because of a regression that followed a gnome-power-manager fix a few years earlier.
Package: gnome-power-manager (Red Hat Enterprise Linux 5) - Affected
No detection rules found.
2011-11-02
Published