Search
Find a vulnerability
Search criteria
2 vulnerabilities found for prado_portal by pradoportal
CVE-2010-4958 (GCVE-0-2010-4958)
Vulnerability from nvd – Published: 2011-10-09 10:00 – Updated: 2024-08-07 04:02
VLAI
EPSS
VEX
Summary
SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://secunia.com/advisories/40902 | third-party-advisoryx_refsource_SECUNIA |
| http://securityreason.com/securityalert/8468 | third-party-advisoryx_refsource_SREASON |
| http://packetstormsecurity.org/1008-exploits/prad… | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/512888/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.vupen.com/english/advisories/2010/2026 | vdb-entryx_refsource_VUPEN |
| http://www.htbridge.ch/advisory/xss_vulnerability… | x_refsource_MISC |
Date Public
2010-08-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T04:02:30.560Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "40902",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/40902"
},
{
"name": "8468",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/8468"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://packetstormsecurity.org/1008-exploits/pradoportal-xss.txt"
},
{
"name": "20100805 XSS vulnerability in Prado Portal",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/512888/100/0/threaded"
},
{
"name": "ADV-2010-2026",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2010/2026"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.htbridge.ch/advisory/xss_vulnerability_in_prado_portal.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2010-08-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T18:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "40902",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/40902"
},
{
"name": "8468",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/8468"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://packetstormsecurity.org/1008-exploits/pradoportal-xss.txt"
},
{
"name": "20100805 XSS vulnerability in Prado Portal",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/512888/100/0/threaded"
},
{
"name": "ADV-2010-2026",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2010/2026"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.htbridge.ch/advisory/xss_vulnerability_in_prado_portal.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2010-4958",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "40902",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/40902"
},
{
"name": "8468",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/8468"
},
{
"name": "http://packetstormsecurity.org/1008-exploits/pradoportal-xss.txt",
"refsource": "MISC",
"url": "http://packetstormsecurity.org/1008-exploits/pradoportal-xss.txt"
},
{
"name": "20100805 XSS vulnerability in Prado Portal",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/512888/100/0/threaded"
},
{
"name": "ADV-2010-2026",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2010/2026"
},
{
"name": "http://www.htbridge.ch/advisory/xss_vulnerability_in_prado_portal.html",
"refsource": "MISC",
"url": "http://www.htbridge.ch/advisory/xss_vulnerability_in_prado_portal.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2010-4958",
"datePublished": "2011-10-09T10:00:00.000Z",
"dateReserved": "2011-10-09T00:00:00.000Z",
"dateUpdated": "2024-08-07T04:02:30.560Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2010-4958 (GCVE-0-2010-4958)
Vulnerability from cvelistv5 – Published: 2011-10-09 10:00 – Updated: 2024-08-07 04:02
VLAI
EPSS
VEX
Summary
SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| http://secunia.com/advisories/40902 | third-party-advisoryx_refsource_SECUNIA |
| http://securityreason.com/securityalert/8468 | third-party-advisoryx_refsource_SREASON |
| http://packetstormsecurity.org/1008-exploits/prad… | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/512888/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.vupen.com/english/advisories/2010/2026 | vdb-entryx_refsource_VUPEN |
| http://www.htbridge.ch/advisory/xss_vulnerability… | x_refsource_MISC |
Date Public
2010-08-05 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T04:02:30.560Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "40902",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/40902"
},
{
"name": "8468",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/8468"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://packetstormsecurity.org/1008-exploits/pradoportal-xss.txt"
},
{
"name": "20100805 XSS vulnerability in Prado Portal",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/512888/100/0/threaded"
},
{
"name": "ADV-2010-2026",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2010/2026"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.htbridge.ch/advisory/xss_vulnerability_in_prado_portal.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2010-08-05T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-10T18:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "40902",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/40902"
},
{
"name": "8468",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/8468"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://packetstormsecurity.org/1008-exploits/pradoportal-xss.txt"
},
{
"name": "20100805 XSS vulnerability in Prado Portal",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/512888/100/0/threaded"
},
{
"name": "ADV-2010-2026",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2010/2026"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.htbridge.ch/advisory/xss_vulnerability_in_prado_portal.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2010-4958",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "40902",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/40902"
},
{
"name": "8468",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/8468"
},
{
"name": "http://packetstormsecurity.org/1008-exploits/pradoportal-xss.txt",
"refsource": "MISC",
"url": "http://packetstormsecurity.org/1008-exploits/pradoportal-xss.txt"
},
{
"name": "20100805 XSS vulnerability in Prado Portal",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/512888/100/0/threaded"
},
{
"name": "ADV-2010-2026",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2010/2026"
},
{
"name": "http://www.htbridge.ch/advisory/xss_vulnerability_in_prado_portal.html",
"refsource": "MISC",
"url": "http://www.htbridge.ch/advisory/xss_vulnerability_in_prado_portal.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2010-4958",
"datePublished": "2011-10-09T10:00:00.000Z",
"dateReserved": "2011-10-09T00:00:00.000Z",
"dateUpdated": "2024-08-07T04:02:30.560Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}