CVE-2010-2133 | SynScan

Vulnerability Database

290,278

Total vulnerabilities in the database

CVE-2010-2133

SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942.

Published: Jun 2, 2010
Updated: Apr 13, 2023
CVE: CVE-2010-2133
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-89

OWASP TOP 10:

A1 - Injection

Affected Software
References

Software	From	Fixed in
mylittleforum / my_little_forum	2.1.1	2.1.1.x
mylittleforum / my_little_forum	2.2.3	2.2.3.x
mylittleforum / my_little_forum	2.2.2	2.2.2.x
mylittleforum / my_little_forum	1.7.6	1.7.6.x
mylittleforum / my_little_forum	2.1.2	2.1.2.x
mylittleforum / my_little_forum	2.2	2.2.x
mylittleforum / my_little_forum	2.1.4	2.1.4.x
mylittleforum / my_little_forum	2.2.1	2.2.1.x
mylittleforum / my_little_forum	2.1.3	2.1.3.x
mylittleforum / my_little_forum	2.0.2	2.0.2.x