National Cyber Awareness System

Vulnerability Summary for CVE-2010-2610

Overview

Multiple SQL injection vulnerabilities in 2daybiz Job Site Script allow remote attackers to execute arbitrary SQL commands via the (1) jid parameter to view_current_job.php, (2) job_iid parameter to show_search_more.php, and (3) left_cat parameter to show_search_result.php.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: XF

Name: jobsitescript-multiple-sql-injection(59733)

Hyperlink:http://xforce.iss.net/xforce/xfdb/59733

External Source: BID

Name: 41123

Hyperlink:http://www.securityfocus.com/bid/41123

External Source: EXPLOIT-DB

Name: 14025

Hyperlink:http://www.exploit-db.com/exploits/14025

External Source: SECUNIA

Name: 40301

Type: Advisory

Hyperlink:http://secunia.com/advisories/40301

External Source: OSVDB

Name: 65716

Hyperlink:http://osvdb.org/65716

External Source: OSVDB

Name: 65715

Hyperlink:http://osvdb.org/65715

External Source: OSVDB

Name: 65714

Hyperlink:http://osvdb.org/65714